System and method for generating a unified network topology for incident detection and response

A non-transitory computer-readable medium storing a set of instructions for generating a unified network topology for a computing environment, the set of instructions comprising:

• one or more instructions that, when executed by one or more processors of a device, cause the device to:
• receive a plurality of event records, each event record generated based on an event in the computing environment;
• extract from each event record of the plurality of event records network topology information;
• detect in the extracted network topology information a parent resource and a child resource;
• generate a representation of the parent resource in a unified network topology;
• generate a representation of the child resource in the unified network topology;
• and
• connect the representation of the parent resource to the representation of the child resource, wherein the connection represents the extracted topology information.

A system for generating a unified network topology for a computing environment comprising:

• a processing circuitry;
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• receive a plurality of event records, each event record generated based on an event in the computing environment;
• extract from each event record of the plurality of event records network topology information;
• detect in the extracted network topology information a parent resource and a child resource;
• generate a representation of the parent resource in a unified network topology;
• generate a representation of the child resource in the unified network topology;
• and
• connect the representation of the parent resource to the representation of the child resource, wherein the connection represents the extracted topology information.