Threat mitigation system and method

A computer program product residing on a non-transitory computer readable storage medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:

• deploying an agent to proactively monitor activity within a computing platform and generate an initial notification if a security event is detected;
• receiving the initial notification of the security event from the agent, wherein the initial notification includes a computer-readable language portion that defines one or more specifics of the security event;
• and
• iteratively processing the initial notification using a generative AI model and a formatting script and one or more tools to produce a summarized human-readable report for the initial notification, wherein the one or more tools include an identification tool to identify an owner of a domain associated with the initial notification.

A computing system including a processor and memory configured to perform operations comprising:

• deploying an agent to proactively monitor activity within a computing platform and generate an initial notification if a security event is detected;
• receiving the initial notification of the security event from the agent, wherein the initial notification includes a computer-readable language portion that defines one or more specifics of the security event;
• and
• iteratively processing the initial notification using a generative AI model and a formatting script and one or more tools to produce a summarized human-readable report for the initial notification, wherein the one or more tools include an identification tool to identify an owner of a domain associated with the initial notification.