A computing system implemented method for correlating virtual asset patterns with external events, comprising: receiving, with a first computing environment , an identification of one of the external events, from one or more electronic sources; receiving first patterns from one or more first virtual assets , wherein each of the one or more first virtual assets provides one or more computing services to one or more users, wherein each of the one or more first virtual assets includes an allocation of one or more hardware and software resources from a second computing environment , wherein the first patterns represent first operational characteristics of the one or more first virtual assets detected by the one or more first virtual assets during the one of the external events, and wherein the first patterns are at least partially based on deviations from pre-determined operating parameters by the one or more first virtual assets; populating a database of an event library , which correlates virtual asset patterns and external events, with the first patterns and the identification of the one of the external events to map the one of the external events to the first patterns; receiving second patterns from one or more second virtual assets , wherein the second patterns represent second operational characteristics of the one or more second virtual assets and are at least partially based on deviations from the pre-determined operating parameters by the one or more second virtual assets; comparing the second patterns to the first patterns; and distributing the identification of the one of the external events to the one or more second virtual assets, if the second patterns are similar to the first patterns. receiving, with a first computing environment , an identification of one of the external events, from one or more electronic sources; receiving first patterns from one or more first virtual assets , wherein each of the one or more first virtual assets provides one or more computing services to one or more users, wherein each of the one or more first virtual assets includes an allocation of one or more hardware and software resources from a second computing environment , wherein the first patterns represent first operational characteristics of the one or more first virtual assets detected by the one or more first virtual assets during the one of the external events, and wherein the first patterns are at least partially based on deviations from pre-determined operating parameters by the one or more first virtual assets; wherein each of the one or more first virtual assets provides one or more computing services to one or more users, wherein each of the one or more first virtual assets includes an allocation of one or more hardware and software resources from a second computing environment , wherein the first patterns represent first operational characteristics of the one or more first virtual assets detected by the one or more first virtual assets during the one of the external events, and wherein the first patterns are at least partially based on deviations from pre-determined operating parameters by the one or more first virtual assets; populating a database of an event library , which correlates virtual asset patterns and external events, with the first patterns and the identification of the one of the external events to map the one of the external events to the first patterns; receiving second patterns from one or more second virtual assets , wherein the second patterns represent second operational characteristics of the one or more second virtual assets and are at least partially based on deviations from the pre-determined operating parameters by the one or more second virtual assets; comparing the second patterns to the first patterns; and distributing the identification of the one of the external events to the one or more second virtual assets, if the second patterns are similar to the first patterns. <EOS>