Systems, methods and computer-readable media for monitoring a computer network for threats using OLAP cubes

A system of monitoring a computer network for threats, the system comprising:

• one or more processors;
• and
• a non-transitory computer-readable medium storing computer-readable instructions that, when executed by the one or more processors, causes the one or more processors to:
• receive, from a plurality of computing devices on the network, dataset data, asset data, and temporal data;
• store, in an online analytical processing cube for each computing device of the plurality of computing devices within the non-tangible computer readable medium, the dataset data within a dataset dimension, the asset data within an asset dimension, and the temporal data within a temporal dimension;
• search one or more online analytical processing cubes for correlated data within two or more of the dataset dimension, the asset dimension, and the temporal dimension satisfying an alert metric;
• and issue an alert when correlated data satisfies the alert metric, wherein:
• the alert metric comprises a processor utilization threshold and a network port threshold;
• and the alert metric is satisfied when the system data within the system dataset comprises a processor utilization that is greater than the processor utilization threshold and the application data within the application dataset comprises a number of threads initiated at a network port is greater than the network port threshold.

A non-transitory computer-readable medium storing instructions that, when executed by a computer, causes the computer to:

• receive, from a plurality of computing devices on the network, dataset data, asset data, and temporal data;
• store, in an online analytical processing cube for each computing device of the plurality of computing devices within the non-tangible computer readable medium, the dataset data within a dataset dimension, the asset data within an asset dimension, and the temporal data within a temporal dimension;
• search one or more online analytical processing cubes for correlated data within two or more of the dataset dimension, the asset dimension, and the temporal dimension satisfying an alert metric;
• and
• issue an alert when correlated data satisfies the alert metric, wherein:
• the alert metric comprises a processor utilization threshold and a network port threshold;
• and
• the alert metric is satisfied when the system data within the system dataset comprises a processor utilization that is greater than the processor utilization threshold and the application data within the application dataset comprises a number of threads initiated at a network port is greater than the network port threshold.