Global mobile communication event ids for improved network and security operations

A system comprising:

• a processor;
• and
• a computer-readable medium storing instructions that are operative upon execution by the processor to:
• assign, by a first network function (NF) of a wireless network, to a first mobile communication event, a first event identifier (ID) of a first set of event IDs, each event ID within the first set of event IDs being unique to a category of mobile communication events and consistent across NFs of the wireless network;
• record, within a first event log at the first NF, a first log entry indicating an occurrence of the first mobile communication event, the first log entry comprising the first event ID, a user equipment (UE) ID, and a timestamp;
• assign, by the first NF, to a second mobile communication event, a second event ID of the first set of event IDs, the second event ID different than the first event ID;
• record, within the first event log, a second log entry indicating an occurrence of the second mobile communication event, the second log entry comprising the first event ID, a UE ID, and a timestamp;
• transmit the first log entry and the second log entry to a cybersecurity operations center;
• correlate a second set of event IDs with a categorized attack of a set of categorized attacks, the second set of event IDs including the first event ID and a second event ID;
• based on at least the first event ID and the second event ID, determine an occurrence of the categorized attack;
• and
• based on at least determining the occurrence of the categorized attack, generate an alert.

One or more computer storage devices having computer-executable instructions stored thereon, which, upon execution by a computer, cause the computer to perform operations comprising:

• assigning, by a first network function (NF) of a wireless network, to a first mobile communication event, a first event identifier (ID) of a first set of event IDs, each event ID within the first set of event IDs being unique to a category of mobile communication events and consistent across NFs of the wireless network;
• recording, within a first event log at the first NF, a first log entry indicating an occurrence of the first mobile communication event, the first log entry comprising the first event ID, a user equipment (UE) ID, and a timestamp;
• assigning, by the first NF, to a second mobile communication event, a second event ID of the first set of event IDs, the second event ID different than the first event ID;
• recording, within the first event log, a second log entry indicating an occurrence of the second mobile communication event, the second log entry comprising the first event ID, a UE ID, and a timestamp;
• transmitting the first log entry and the second log entry to a cybersecurity operations center;
• correlating a second set of event IDs with a categorized attack of a set of categorized attacks, the second set of event IDs including the first event ID and a second event ID;
• based on at least the first event ID and the second event ID, determining an occurrence of the categorized attack;
• and
• based on at least determining the occurrence of the categorized attack, generating an alert.