Abstract: A system, method, and computer-program product includes generating a polling task that is configured to retrieve raw event data of a subscriber that occurred during a target time span from a third-party security service, computing an optimal polling frequency control value for the polling task in response to generating the polling task, partitioning the target time span into a plurality of distinct sub-intervals of time based on the optimal polling frequency control value computed for the polling task, automatically transmitting, to an application programming interface endpoint of the third-party security service, a plurality of distinct network requests to optimally perform the polling task, receiving the raw event data of the subscriber from the third-party security service that occurred during the target time span in response to transmitting the plurality of distinct network request, and generating one or more security alerts in response to processing the raw event data.

Abstract: A method includes generating a polling task that is configured to retrieve raw event data of a subscriber that occurred during a target time span from a third-party security service, computing an optimal polling frequency control value for the polling task in response to generating the polling task, partitioning the target time span into a plurality of distinct sub-intervals of time based on the optimal polling frequency control value computed for the polling task, automatically transmitting, to an application programming interface endpoint of the third-party security service, a plurality of distinct network requests to optimally perform the polling task, receiving the raw event data of the subscriber from the third-party security service that occurred during the target time span in response to transmitting the plurality of distinct network request, and generating one or more security alerts in response to processing the raw event data.

Abstract: A system, method, and computer-program product includes generating a polling task that is configured to retrieve raw event data of a subscriber that occurred during a target time span from a third-party security service, computing an optimal polling frequency control value for the polling task in response to generating the polling task, partitioning the target time span into a plurality of distinct sub-intervals of time based on the optimal polling frequency control value computed for the polling task, automatically transmitting, to an application programming interface endpoint of the third-party security service, a plurality of distinct network requests to optimally perform the polling task, receiving the raw event data of the subscriber from the third-party security service that occurred during the target time span in response to transmitting the plurality of distinct network request, and generating one or more security alerts in response to processing the raw event data.