Security rule generation based on cognitive and industry analysis

This invention describes a system that automatically creates new security rules to protect computer networks. It works by feeding a "cognitive computing system" information about known cyberattacks from various sources, alongside real-time security logs from a monitored network. This system then figures out the unique characteristics of potential threats, specifically identifying Indicators of Compromise (IoCs) from endpoint devices like those showing failed logins. If no existing security rule can handle these characteristics, the system automatically writes and deploys a brand new rule to defend the network.