System and method for detecting potential threats by monitoring user and system behavior associated with computer and network activity

A system for monitoring a data network and identifying potentially malicious or threatening cyber activity, comprising:

• at least one host system, wherein each host system comprises a host processor and host memory;
• and
• a digital hidrosis monitor comprising a set of computer readable instructions stored in each host memory that are executable by each host processor to:
• monitor and collect digital hidrosis data from the host system, wherein the digital hidrosis data comprises data associated with predetermined system behavioral factors,
• compare the digital hidrosis data with reference digital hidrosis data stored in the memory, wherein the reference digital hidrosis data defines normal values and/or a normal range of values for the predetermined system behavioral factors, and
• determine whether malicious or threatening cyber activity may be present based on the comparison between the digital hidrosis data and the reference digital hidrosis data.

A system for monitoring a data network and identifying potentially malicious or threatening cyber activity, comprising:

• at least one digital hidrosis monitor, wherein each digital hidrosis monitor:
• monitors and collects digital hidrosis data from a respective host system, wherein the digital hidrosis data comprises data associated with predetermined system behavioral factors,
• compares the digital hidrosis data with reference digital hidrosis data, wherein the reference digital hidrosis data defines normal values and/or a normal range of values for the predetermined system behavioral factors, and
• determines whether malicious or threatening cyber activity may be present based on the comparison between the digital hidrosis data and the reference digital hidrosis data.