Cognitive offense analysis using contextual data and knowledge graphs

This invention describes an automated way to analyze cybersecurity attacks. When a security system detects an incident, it creates an initial map of the event using related information. This map includes specific details, like suspicious files or network addresses, which are then checked against a larger database of known threats (a "knowledge graph") to see if they're linked to known malicious actors, expanding the initial map for a human analyst.