公开(公告)号：US11075951B1

公开(公告)日：2021-07-27

申请号：US16024528

申请日：2018-06-29

申请人： NortonLifeLock Inc.

发明人： Daniel Kats ,  Brian Schlatter ,  Michael Hart ,  Steven Meckl ,  Jung Hui Yoon ,  Matteo Dell'Amico

IPC分类号： G06F21/00 ,  H04L29/06 ,  G06N5/02 ,  G06F16/245 ,  G06F16/28 ,  G06F16/23

摘要： A method for learning queries in automated incident remediation is performed by one or more computing devices, each comprising one or more processors. The method includes parsing at least a portion of incidents from an incident log based at least in part on one or more incident types associated with each incident from the portion of the incidents, identifying parameters associated with a plurality of queries, grouping the plurality of queries into a plurality of query groups based at least in part on the identified parameters, identifying a new incident added to the incident log, and generating an automated query based at least in part on a similarity between the new incident and a prior incident.