Adaptive system for network and security management

A computer-implemented method for identifying computer risks, comprising:

• receiving inputs from various third-party sources, including streaming data and historical data;
• and
• identifying computer risks based on the received inputs using a hypothesis generation component, wherein the hypothesis generation is designed to:
• identify a first computer risk based on a current state of a network environment associated with observed inputs;
• identify a second computer risk based on changes to a risk profile of entry points and known vulnerabilities of the network environment;
• identify a third computer risk based on critical attack path predictions that cross a predetermined threshold;
• and
• evaluating the identified first, second and third computer risks using the hypothesis generation component.

A computer-implemented method for identifying computer risks, comprising:

• receiving inputs from various third-party sources, including streaming data and historical data;
• identifying computer risks based on the received inputs using a hypothesis generation component, by:
• identifying at least one first computer risk based on a current state of a network environment associated with observed inputs;
• identifying at least one second computer risk based on changes to a risk profile of entry points and known vulnerabilities of the network environment;
• identifying at least one third computer risk based on critical attack path predictions that cross a predetermined threshold;
• and
• evaluating the identified first computer risk, second computer risk and third computer risk using the hypothesis generation component by:
• prioritizing the identified first computer risk, second computer risk, and third computer risk against other identified risks based on risk scores;
• identifying threat hunting hypotheses for the prioritized first computer risk, second computer risk and third computer risk.