Generating security reports

A system for generating security reports, the system comprising:

• a processor;
• and
• memory comprising instructions that, when executed by the processor, cause the system to perform a set of operations, the set of operations comprising:
• receiving a user query and security data;
• providing the user query and security data to a semantic model, wherein the semantic model generates one or more first embeddings;
• receiving, from a data model, one or more second embeddings, wherein the data model is generated based on historical threat intelligence data;
• generating an execution plan based on the one or more first embeddings and the one or more second embeddings;
• and
• returning a report corresponding to the execution plan.

A method of generating security reports, the method comprising:

• receiving a user query and security data;
• providing the user query and security data to a semantic model, wherein the semantic model generates one or more first embeddings;
• receiving, from a data model, one or more second embeddings;
• generating an execution plan based on the one or more first embeddings and the one or more second embeddings;
• and
• automatically executing the execution plan via one or more processors.