ADVANCED INTELLIGENCE ENGINE

摘要

An advanced intelligence engine (AIE) for use in identifying what may be complex events or developments on one or more data platforms or networks from various types of structured or normalized data generated by one or more disparate data sources. The AIE may conduct one or more types of quantitative, correlative, behavioral and corroborative analyses to detect events from what may otherwise be considered unimportant or non-relevant information spanning one or more time periods. Events generated by the AIE may be passed to an event manager to determine whether further action is required such as reporting, remediation, and the like.

主权项

1. A method for use in monitoring one or more platforms of one or more data systems, comprising:
receiving, at a processing engine, structured data generated by one or more platforms over at least one communications network; and analyzing, at the processing engine using a first rule block, at least some of the data, wherein the analyzing includes:
identifying, at the processing engine, a first portion of the structured data;evaluating, using at least a first expression, the first portion of the structured data in view of reference data to determine whether a result is one of at least first and second outcomes; andevaluating the result to determine an event of interest.