Configurable cyber-attack trackers

A method of generating a configurable cyber-attack tracker, the method comprising:

• providing a user interface that include a threat parameter selection component configured to receive at least one threat parameter user input;
• receiving at least one threat parameter user input with the threat parameter selection component;
• providing a threat value user input element configured to receive user input specifying a matching value for the at least one threat parameter user input;
• receiving a respective matching value for the each at least one threat parameter with the threat value user input element;
• providing a timing user input element configured to receive user input specifying a time window;
• receiving timing input specifying a time window with the timing user input element;
• executing a query against a threat data store based on the at least one threat parameter user input, each matching value, and the timing input;
• and
• providing query results.

A method of executing a customized cyber-attack tracker, the method comprising:

• accessing a tracker definition to identify a threat signal, associated matching value, and threat timing information;
• querying a threat data store to identify threat information in the data having the matching value in the identified threat signal and timing information satisfying the threat timing information;
• comparing the threat information to a user-defined threshold;
• and
• selectively generating a remedial action based on whether the threat information exceeds the user-defined threshold.