Dynamically reweighting distributions of event observations

A system comprising:

• a processor;
• a data bus coupled to the processor;
• and
• a non-transitory, computer-readable storage medium embodying computer program code, the non-transitory, computer-readable storage medium being coupled to the data bus, the computer program code interacting with a plurality of computer operations and comprising instructions executable by the processor and configured for:
• receiving a stream of events, the stream of events comprising a plurality of events;
• extracting features from the plurality of events;
• constructing a distribution of the features from the plurality of events, the distribution of the features comprising a probability density function distribution of features over a series of time windows;
• analyzing the distribution of the features from the plurality of events:
• dynamically reweighting the distribution of the features to scale a number of events contained within the distribution;
• and,
• enriching data associated with each of the plurality of events prior to extracting features from the plurality of events;
• and wherein
• the enriching data comprises at least one of
• validating event data associated with at least some of the plurality of events,
• disclaiming certain event data associated with at least some of the plurality of events;
• deduplicating at least some of the plurality of events;
• performing an entity resolution operation on at least some of the plurality of events;
• performing an attachment enrichment operation on data associated with at least some of the plurality of events;
• and,
• performing a domain enrichment on at least some of the plurality of events.

A non-transitory, computer-readable storage medium embodying computer program code, the computer program code comprising computer executable instructions configured for:

• receiving a stream of events, the stream of events comprising a plurality of events;
• extracting features from the plurality of events;
• constructing a distribution of the features from the plurality of events, the distribution of the features comprising a probability density function distribution of features over a series of time windows;
• analyzing the distribution of the features from the plurality of events;
• dynamically reweighting the distribution of the features to scale a number of events contained within the distribution;
• and,
• enriching data associated with each of the plurality of events prior to extracting features from the plurality of events;
• and wherein
• the enriching data comprises at least one of
• validating event data associated with at least some of the plurality of events,
• disclaiming certain event data associated with at least some of the plurality of events;
• deduplicating at least some of the plurality of events;
• performing an entity resolution operation on at least some of the plurality of events;
• performing an attachment enrichment operation on data associated with at least some of the plurality of events;
• and,
• performing a domain enrichment on at least some of the plurality of events.