Integrated cybersecurity threat management

A computer program product embodied in a non-transitory computer readable medium for cybersecurity management, the computer program product comprising code which causes one or more processors to perform operations of:

• accessing a plurality of network-connected cybersecurity threat protection applications;
• ingesting a plurality of heterogeneous log files, wherein the log files are generated by at least two of the plurality of cybersecurity threat protection applications;
• sorting each of the plurality of log files, wherein the sorting enables identification of cybersecurity threat protection elements among the plurality of log files;
• integrating the cybersecurity threat protection elements that were identified;
• evaluating the cybersecurity threat protection elements that were integrated;
• and
• generating at least one response for cybersecurity threat management, based on a result of the evaluating.

A computer system for cybersecurity comprising:

• a memory which stores instructions;
• one or more processors coupled to the memory, wherein the one or more processors, when executing the instructions which are stored, are configured to:
• access a plurality of network-connected cybersecurity threat protection applications;
• ingest a plurality of heterogeneous log files, wherein the log files are generated by at least two of the plurality of cybersecurity threat protection applications;
• sort each of the plurality of log files, wherein the sorting enables identification of cybersecurity threat protection elements among the plurality of log files;
• integrate the cybersecurity threat protection elements that were identified;
• evaluate the cybersecurity threat protection elements that were integrated;
• and
• generate at least one response for cybersecurity threat management, based on a result of the evaluating.