Threat intelligence system

A method for providing a threat intelligence system, comprising:

• extracting, by a system provider device and based on a first optical character recognition (OCR) process, a first set of textual data corresponding to a first subset of images of a first plurality of images of a first environment, the first subset of images depicting text within the first environment;
• extracting, by the system provider device and based on a second OCR process, a second set of textual data corresponding to a second plurality of images of a second environment, the second plurality of images depicting text within the second environment;
• prior to comparing an entire output of the first OCR process including the extracted first set of textual data to an entire output of the second OCR process including the extracted second set of textual data, generating, by the system provider device and using the extracted first set of textual data, a plurality of initial threat assessment scores, wherein each image of the first subset of images is assigned its own initial threat assessment score from the plurality of initial threat assessment scores;
• after generating the plurality of initial threat assessment scores, comparing, by the system provider device, the entire output of the first OCR process to the entire output of the second OCR process;
• based on the comparing the entire output of the first OCR process to the entire output of the second OCR process, updating, by the system provider device, the plurality of initial threat assessment scores to a plurality of first threat assessment scores, wherein each image of the first subset of images is assigned its own first threat assessment score from the plurality of first threat assessment scores;
• based on the first threat assessment score for at least one image of the first subset of images being greater than a threshold value, generating, by the system provider device, a first security alert;
• and
• causing, by the system provider device, a user device to display the first security alert.

A non-transitory machine-readable medium having stored thereon machine-readable instructions executable to cause a machine to perform operations comprising:

• extracting, based on a first optical character recognition (OCR) process, a first set of textual data corresponding to a first subset of images of a first plurality of images of a first environment, the first subset of images depicting text within the first environment;
• extracting, based on a second OCR process, a second set of textual data corresponding to a second plurality of images of a second environment, the second set of textual data previously stored in an indexed and searchable database and the second plurality of images depicting text within the second environment;
• prior to comparing an entire output of the first OCR process including the extracted first set of textual data to an entire output of the second OCR process including the extracted second set of textual data, generating, using the extracted first set of textual data, a plurality of initial threat assessment scores, wherein each image of the first subset of images is assigned its own initial threat assessment score from the plurality of initial threat assessment scores;
• after generating the plurality of initial threat assessment scores, comparing the entire output of the first OCR process to the entire output of the second OCR process;
• based on the comparing the entire output of the first OCR process to the entire output of the second OCR process, updating the plurality of initial threat assessment scores to a plurality of first threat assessment scores, wherein each image of the first subset of images is assigned its own first threat assessment score from the plurality of first threat assessment scores;
• based on the first threat assessment score for at least one image of the first subset of images being greater than a threshold value, generating a first security alert;
• and
• causing a user device to display the first security alert.