Realtime triggering framework

A non-transitory, computer-readable medium storing one or more instructions executable by a computer system to perform operations comprising:

• generating a trigger registration for a selected triggering type;
• storing the generated trigger registration in a triggering persistency;
• analyzing a received event from an event persistency;
• comparing data associated with the analyzed event with the triggering persistency;
• and
• based on the comparison, processing, using a pattern execution framework, an enterprise threat detection (ETD) pattern to perform actions responsive to the received event.

A computer-implemented system, comprising:

• a hardware processor interoperably coupled with a computer memory and configured to perform operations comprising:
• generating a trigger registration for a selected triggering type;
• storing the generated trigger registration in a triggering persistency;
• analyzing a received event from an event persistency;
• comparing data associated with the analyzed event with the triggering persistency;
• and
• based on the comparison, processing, using a pattern execution framework, an enterprise threat detection (ETD) pattern to perform actions responsive to the received event.