Dynamic threat event management system and method

A method for a content-driven threat management system, the method comprising:

• creating a threat detection primary object P(n) with threat mitigation data using researchers of at least one of software and malicious code;
• encoding the threat detection primary object P(n) with threat mitigation data within an object capable of being transmitted to a personal computer system using a transmission vector update function U(n);
• transmitting the threat detection primary object P(n) with threat mitigation data to a threat agent A(n) using the transmission vector update function U(n);
• updating at least one threat function N(m) using the threat agent A(n) to update at least one threat functional description of the at least one threat function N(m) to include the threat detection primary object P(n) with threat mitigation data;
• using the threat detection primary object P(n) with threat mitigation data to be capable of recognizing at least one threat event based upon the threat detection primary object P(n) with threat mitigation data;
• responding to the at least one threat event as directed by the threat detection primary object P(n) with threat mitigation data, including executing at least one function of the threat function N(m), comprising at least communicating to at least one of the threat agent A(n), at least one other threat function N(k) where k≠m, and a command and control monitor function M(n);
• and
• executing at least one function of the at least one of the threat agent A(n), the at least one other threat function N(k) where k≠m, and the command and control monitor function M(n), each capable of developing a secondary object S(n) capable of being communicated to at least one of the threat agent A(n), the at least one threat function N(m), the at least one other threat function N(k) where k≠m, and the command and control monitor function M(n).

A method for a content-driven threat management system the method comprising:

• creating a threat detection primary object P(n) with threat mitigation data using researchers of at least one of software and malicious code;
• encoding the threat detection primary object P(n) with threat mitigation data within an object capable of being transmitted to a personal computer system using a transmission vector update function U(n);
• transmitting the threat detection primary object P(n) with threat mitigation data to a threat agent A(n) using the transmission vector update function U(n);
• updating a plurality of threat functions N(1), N(2), . . . , N(m) using the threat agent A(n) to update at least one threat functional description of the plurality of threat functions N(1), N(2), . . . , N(m) to include the threat detection primary object P(n) with threat mitigation data;
• using the threat detection primary object P(n) with threat mitigation data to be capable of recognizing at least one threat event based upon the threat detection primary object P(n) with threat mitigation data;
• responding to the at least one threat event as directed by the threat detection primary object P(n) with threat mitigation data, including executing at least one function of N(j), one of the plurality of threat functions N(1), N(2), . . . , N(m), comprising at least communicating to at least one of the threat agent A(n), at least one other threat function N(k) where k≠j, and a command and control monitor function M(n);
• and
• executing at least one function of the at least one of the threat agent A(n), the at least one other threat function N(k) where k≠j, and the command and control monitor function M(n), each capable of developing a secondary object S(n) capable of being communicated to at least one of the threat agent A(n), at least one of the threat functions N(j) where j=1, 2, . . . , m, and the command and control monitor function M(n).