Abstract: A network monitoring system (100) implements a variety of shared services that aggregate knowledge acquired in connection with multiple client networks and securely leverage such knowledge in monitoring networks of individual clients or entities. The system (100) generally includes a client network (110), a security intelligence platform (SIP) (120), a shared services utility (130), and a browser platform (140) running an application (142). The client network (110) provides a data signal (150), for example, a stream of logs and other structured or unstructured data to the SIP (120) which monitors the client network (110) based on the signal (150) and provides dashboard network information, generates alarms, and provides reports and other processed data as outputs. Such monitoring leverages various shared services of platform (130) including curated content (136) that is sourced from client networks and verified by the system (100).