Techniques for incident detection in computing environments utilizing artificial intelligence and a unified network topology

A non-transitory computer-readable medium storing a set of instructions for incident detection based on a unified network topology of a computing environment, the set of instructions comprising:

• one or more instructions that, when executed by one or more processing circuitries of a device, cause the device to:
• generate a representation of a unified network topology for a network topology of a computing environment, the representation based on a unified data schema, wherein the unified data schema is mapped to a plurality of data schemas, each data schema corresponding to a data source of a plurality of data sources;
• receive an event record from a first data source of the plurality of data sources, respective of a first resource, the first resource represented in the unified network topology;
• determine a baseline behavior of the first resource based on the unified network topology;
• determine a context length of a language model (LM);
• generate context data for the LM based on the event record, the baseline behavior, and the determined context length;
• generate a predicted incident based on processing a prompt and the context data utilizing the LM;
• and
• initiate a remediation action based on the predicted incident.

A system for incident detection based on a unified network topology of a computing environment comprising:

• a processing circuitry;
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• generate a representation of a unified network topology for a network topology of a computing environment, the representation based on a unified data schema, wherein the unified data schema is mapped to a plurality of data schemas, each data schema corresponding to a data source of a plurality of data sources;
• receive an event record from a first data source of the plurality of data sources, respective of a first resource, the first resource represented in the unified network topology;
• determine a baseline behavior of the first resource based on the unified network topology;
• determine a context length of a language model (LM);
• generate context data for the LM based on the event record, the baseline behavior, and the determined context length;
• generate a predicted incident based on processing a prompt and the context data utilizing the LM;
• and
• initiate a remediation action based on the predicted incident.