Abstract: Generating unified cybersecurity signals from multiple sources includes receiving a plurality of cybersecurity signals each determined based on monitoring a computing environment by a plurality of cybersecurity monitoring systems, including at least two disparate cybersecurity monitoring systems; managing a graph based on the plurality of cybersecurity signals where the graph includes nodes of entities in the computing environment and vertices representing relationships between the nodes, wherein the managing includes utilizing a unified node in the graph for two cybersecurity signals from the at least two disparate cybersecurity monitoring systems; analyzing the graph to determine a representation of the computing environment; and managing the computing environment based on the analyzing the graph including determining one or more cybersecurity threats in the computing environment and associated severity.

Abstract: A system and method are disclosed for reducing false responses from a large language model. The method includes: mapping a data field from a first source to a semantic layer, the semantic layer including a plurality of data fields; storing data from the first source in a database based on the semantic layer; tokenizing each data field for a first large language model (LLM); fine-tuning the first LLM based on the tokenized semantic layer; providing a prompt to the first LLM, which configures it to generate an output answer; providing the output answer to a second LLM, which configures it to generate a query for the database; executing the query on the database to generate a database output based on the stored data; and providing the output answer in a user interface (UI) in response to determining that the database output and the output answer are within a predefined threshold.

Abstract: A system and method for cybersecurity vulnerability management through ticket system reduction reduces alert fatigue. The method includes, responsive to monitoring of a computing environment by a plurality of cybersecurity monitoring systems, receiving a plurality of alerts from the plurality of cybersecurity monitoring systems that provide overlapping detection of cybersecurity issues and do not communicate with one another, such that a given alert from each of the plurality of cybersecurity monitoring systems possibly relates to a same cybersecurity issue; preprocessing the plurality of alerts to identify any alerts for the same cybersecurity issue; and generating tickets for the plurality of alerts including a unified ticket for the any alerts for the same cybersecurity issue thereby reducing tickets by using the unified ticket for duplicate alerts from the plurality of cybersecurity monitoring systems.

Abstract: A system and method for generating an application layer for a representation graph is disclosed. The method includes defining a data entity in a representation graph, the data entity including a plurality of data fields; generating a node based on the data entity in the representation graph, the node representing a unique entity; receiving data respective of the unique entity from a plurality of data sources, such that a first data source of the plurality of data sources provides data to a first data field of the plurality of data fields, and a second data source of the plurality of data sources provides data to a second data field of the plurality of data fields; applying a control to the node based on the received data; and initiating an action based on applying the control to the received data.

Abstract: A system and method for cybersecurity vulnerability management through ticket system reduction reduces alert fatigue. The method includes receiving a plurality of alerts from a cybersecurity monitoring system, the cybersecurity monitoring system configured to monitor a computing environment, wherein each alert includes a plurality of attributes; generating in a graph database a ticket node corresponding to each alert of the received plurality of alerts; generating in the graph database a ticket group node, the ticket group node connected to a plurality of ticket nodes, each ticket node of the plurality of ticket nodes corresponding to an alert having an attribute with a same value; generating a ticket in a ticketing system corresponding to the ticket group node; and generating a visual representation of the ticket corresponding to the ticket group node.

Abstract: A system and method for unifying cybersecurity data for threat management utilizes a plurality of cybersecurity monitoring systems. The method includes receiving a first cybersecurity signal from a first monitoring system, the first monitoring system configured to monitor a computing environment for a cybersecurity threat; receiving a second cybersecurity signal from a second monitoring system, the second monitoring system configured to monitor the computing environment for the cybersecurity threat, wherein the second monitoring system is independent of the first monitoring system; generating a unified cybersecurity object based on the first cybersecurity signal and the second cybersecurity signal; and determining a severity level of the cybersecurity threat based on the unified cybersecurity object.

Abstract: A system and method for generating a compact representation of a compute environment based on generating uber objects in a graph database from a plurality of sources is disclosed. The method includes receiving object metadata of an entity from a first source; receiving object metadata of the cloud entity from a second source, the second source operating independently of the first source; and generating an uber node representing the cloud entity based on a predefined schema in a graph database, the received object metadata from the first source and the received object metadata from the second source.

Abstract: A system and method for cybersecurity vulnerability management through ticket system reduction reduces alert fatigue. The method includes receiving a plurality of alerts from a cybersecurity monitoring system, the cybersecurity monitoring system configured to monitor a computing environment, wherein each alert includes a plurality of attributes; generating in a graph database a ticket node corresponding to each alert of the received plurality of alerts; generating in the graph database a ticket group node, the ticket group node connected to a plurality of ticket nodes, each ticket node of the plurality of ticket nodes corresponding to an alert having an attribute with a same value; generating a ticket in a ticketing system corresponding to the ticket group node; and generating a visual representation of the ticket corresponding to the ticket group node.

Abstract: A system and method for providing big data analytics responsive to dynamically-changing data models are provided. The method includes parsing, based on a logical data schema, a user query into a plurality of sub-queries; sending the plurality of sub-queries to a plurality of data stores, wherein each data store is selected based on a physical data schema of a dynamic data schema; receiving a plurality of sub-result datasets, wherein each sub-result dataset corresponds to a sub-query; and combining the plurality of sub-result datasets into a single resulting data set based on a logical schema of the dynamic data schema, wherein the combining includes at least any of: an aggregation operation and a join operation.

Abstract: A system and method for normalizing campaign data gathered from a plurality of advertising platforms. The method comprises receiving campaign data related to at least one campaign gathered from a plurality of advertising platforms; mapping data dimensions in the received campaign data to a marketing data model to produce a dataset that is organized and functions as the marketing data model; normalizing data values in the dataset according to a unified notation defined for each of the data dimensions in the marketing data model; and optimizing the normalized dataset to allow faster manipulation of data.

Abstract: A system and method for providing big data analytics responsive to dynamically-changing data models are provided. The method includes parsing, based on a logical data schema, a user query into a plurality of sub-queries; sending the plurality of sub-queries to a plurality of data stores, wherein each data store is selected based on a physical data schema of a dynamic data schema; receiving a plurality of sub-result datasets, wherein each sub-result dataset corresponds to a sub-query; and combining the plurality of sub-result datasets into a single resulting data set based on a logical schema of the dynamic data schema, wherein the combining includes at least any of: an aggregation operation and a join operation.

Abstract: A system and method for normalizing campaign data gathered from a plurality of advertising platforms. The method comprises receiving campaign data related to at least one campaign gathered from a plurality of advertising platforms; mapping data dimensions in the received campaign data to a marketing data model to produce a dataset that is organized and functions as the marketing data model; normalizing data values in the dataset according to a unified notation defined for each of the data dimensions in the marketing data model; and optimizing the normalized dataset to allow faster manipulation of data.