Method for characterizing asset groups spanning multiple asset classes in a computer network

A method comprising:

• accessing a first set of objects, generated by a set of sources during a first time interval, representing attributes of a first set of assets comprising a first asset and a second asset;
• partitioning the first set of objects into a first set of object groups, each object group in the first set of object groups representing an asset in the first set of assets;
• for each object group in the set of object groups, aggregating attributes represented in objects in the object group into an asset container, in a set of asset containers, representing an asset in the first set of assets;
• accessing a first set of attributes, from a first asset container in the set of asset containers, exhibited by the first asset during the first time interval;
• identifying a first association between the first asset and the second asset based on the first set of attributes;
• accessing a second set of attributes, from a second asset container in the set of asset containers, exhibited by the second asset during the first time interval;
• based on the first association between the first asset and the second asset, associating the first asset with a first subset of attributes in the second set of attributes;
• calculating a first risk score to the first asset based on the first set of attributes and the first subset of attributes, in the second set of attributes, associated with the first asset;
• and
• in response to the first risk score exceeding a risk threshold, executing a first action on the first asset.

A method comprising:

• accessing a set of asset containers representing a set of assets comprising a first asset and a second asset;
• accessing a first set of attributes, from a first asset container in the set of asset containers, exhibited by the first asset during a first time interval;
• identifying a first association between the first asset and the second asset based on the first set of attributes;
• accessing a second set of attributes, from a second asset container in the set of asset containers, exhibited by the second asset during the first time interval;
• based on the first association between the first asset and the second asset, associating the first asset with a first subset of attributes in the second set of attributes;
• defining a first attribute category exhibiting a target combination of attributes;
• assigning a first action to the first attribute category;
• identifying a first asset group, comprising the first asset, exhibiting the target combination of attributes during the first time interval based on the target combination of attributes represented in:
• the first set of attributes;
• and
• the first subset of attributes, in the second set of attributes, associated with the first asset;
• and
• executing the first action, assigned to the first attribute category, on assets in the first asset group.