System for managing security risks with generative artificial intelligence

A method for exfiltration analysis, the method comprising:

• receiving a plurality of file identifiers of a corresponding plurality of files, the plurality of files related to exfiltration alerts;
• storing information about the plurality of files in a forensic file data store, the forensic file data store used to provide contextual information for a large language model (LLM);
• receiving an exfiltration query from a user of the system;
• and
• producing a generative output using the LLM based on the exfiltration query and the contextual information.

A non-transitory machine-readable medium for exfiltration analysis, including instructions, which when executed by a machine, cause the machine to:

• receive a plurality of file identifiers of a corresponding plurality of files, the plurality of files related to exfiltration alerts;
• store information about the plurality of files in a forensic file data store, the forensic file data store used to provide contextual information for a large language model (LLM);
• receive an exfiltration query from a user;
• and
• produce a generative output using the LLM based on the exfiltration query and the contextual information.