Exabeam, Inc.

Carlos Bernal Valdez

Derek Lin

The present disclosure relates to a system, method, and computer program for scoring and organizing evidence of cybersecurity threats from multiple data sources. The system receives potential evidence of cybersecurity threats from multiple different data sources, typically each with their own scoring scale. The system scores/rescores the incoming data items on a common scale based on a set of behavior indicators specific to each data stream. Threat paths are then identified and scored from the scored/rescored data from the different sources. In certain embodiments, the system alters the initial data item scores based on a set of prioritization weights that enables certain factors to be prioritized over other factors in assessing the cybersecurity risk associated with the data items. Likewise, in certain embodiments, the initial threat path scores are also altered based on another set of prioritization weights for threat paths. In certain embodiments, cases are automatically created for threat paths scores satisfying a case-creation threshold.

Growing community of inventors

Lawrenceville, GA, United States of America

Carlos Bernal Valdez