System and method of cloud detection, investigation and elimination of targeted attacks

A system for detecting computer attacks comprising:

• a computer protection module executed on a hardware processor and configured to:
• gather information on an object in a computer in a network;
• and
• save a security notification with the object in an object database in the network;
• a module for protection against targeted attacks executed on a hardware processor and configured to;
• search for the object in a threat database in the network;
• add one or more tags to the object when the object is found in the threat database and adding a correspondence between a record in the object database and the threat database;
• and
• determine that a computer attack has occurred when the one or more tags correspond to signatures in a database of computer attacks.

A non-transitory computer readable medium storing thereon computer executable instructions, that when executed by a hardware processor, performs a method for detecting computer attacks comprising:

• gathering, using a hardware processor, information on an object in a computer in a network;
• saving a security notification with the object in an object database in the network;
• searching for the object in a threat database in the network;
• adding one or more tags to the object when the object is found in the threat database and adding a correspondence between a record in the object database and the threat database;
• and
• determining that a computer attack has occurred when the one or more tags correspond to signatures in a database of computer attacks.