Abstract: This technology extracts threat data in real time from received incident data on each of one or more current cyber-attacks. Classified data associated with one of a plurality of prior cyber-attacks is retrieved in real time based on the extracted threat data for each of the cyber-attacks. One of a plurality of risk priorities for each of the cyber-attacks is determined in real time based on a calculated risk rating value for each of the cyber-attacks. One of a plurality of automated resolutions for each of cyber-attacks may be identified based on the retrieved classified data. The identified one of the plurality of automated resolutions for each of the cyber-attacks may automatically executed in an order based on the determined one of the plurality of risk priorities for each of the cyber-attacks.