Threat detection in a networked environment and corrective actions to address the threat

1 . A computer-implemented method, comprising:

receiving data of an entity in a digital environment;

initializing a data structure comprising entity information and casing information associated with the entity, wherein the casing information associated with the entity comprises, for each of one or more enterprise team servers corresponding one or more enterprise teams, whether the enterprise team maintains cases regarding the entity, including status of the cases;

transmitting to each of the one or more enterprise team servers, a request comprising a request for relevant data to the casing information associated with the entity;

receiving, from each enterprise team server and in response to the request to each enterprise team server, a response comprising relevant data to casing information associated with the entity;

updating the data structure using the received responses;

determining a corrective action using data regarding one or more ongoing cases corresponding to the entity obtained upon querying the data structure; and

performing the corrective action with respect to the entity,

wherein the data structure comprises a first variable that represents an identifier of an entity, a second variable for each enterprise team server that indicates if one or more cases associated with the entity is present in the enterprise team server, and a third variable for each enterprise team server that indicates if one or more of the respective cases associated with the entity has an open status, and

wherein updating the data structure representing casing information associated with the entity using the received responses comprises:

setting every second and third variable to zero;

for each enterprise team server response,

determining if one or more cases associated with the entity is present in the enterprise team server;

in response to determining that one or more cases associated with the entity is present in the enterprise team server, updating the respective second variable to indicate as such;

determining if one or more of the respective cases associated with the entity has an open status; and

in response to determining that one or more of the respective cases associated with the entity has an open status, updating the respective third variable to indicate as such.

2 . The method of claim 1 , wherein the request comprising the request for relevant data to the casing information associated with the entity further comprises a request for relevant data to the casing information associated with any related identifier of the entity.

3 . The method of claim 2 , wherein any related identifier of the entity comprises identifiers determined using a string metric.

4 . The method of claim 2 , wherein any related identifier of the entity comprises identifiers determined using pattern matching.

5 . The method of claim 1 , further comprising providing the data structure for use in performing a downstream task.

6 . The method of claim 5 , wherein the downstream task comprises storing the data structure in a database for subsequent retrieval.

7 . The method of claim 6 , wherein the downstream task comprises:

generating a plurality of data structures for a respective plurality of entities; and

counting a number of data structures that reflect more than one team having one or more cases associated with the respective entity, and at least one of the cases associated with the respective entity having an open status.

8 . The method of claim 6 , wherein the downstream task comprises:

using a machine learning model to process the data structure.

9 . A system comprising:

one or more computers comprising at least one processor and memory; and

one or more storage devices storing instructions that, when executed by the one or more computers, cause the one or more computers to perform operations, comprising:

receiving data of an entity in a digital environment;

initializing a data structure comprising entity information and casing information associated with the entity, wherein the casing information associated with the entity comprises, for each of one or more enterprise team servers corresponding one or more enterprise teams, whether the enterprise team maintains cases regarding the entity, including status of the cases;

transmitting to each of the one or more enterprise team servers, a request comprising a request for relevant data to the casing information associated with the entity;

receiving, from each enterprise team server and in response to the request to each enterprise team server, a response comprising relevant data to casing information associated with the entity;

updating the data structure using the received responses;

determining a corrective action using data regarding one or more ongoing cases corresponding to the entity obtained upon querying the data structure; and

performing the corrective action with respect to the entity,

wherein the data structure comprises a first variable that represents an identifier of an entity, a second variable for each enterprise team server that indicates if one or more cases associated with the entity is present in the enterprise team server, and a third variable for each enterprise team server that indicates if one or more of the respective cases associated with the entity has an open status, and

wherein updating the data structure representing casing information associated with the entity using the received responses comprises:

setting every second and third variable to zero;

for each enterprise team server response,

determining if one or more cases associated with the entity is present in the enterprise team server;

in response to determining that one or more cases associated with the entity is present in the enterprise team server, updating the respective second variable to indicate as such;

determining if one or more of the respective cases associated with the entity has an open status; and

in response to determining that one or more of the respective cases associated with the entity has an open status, updating the respective third variable to indicate as such.

10 . The system of claim 9 , wherein the request comprising the request for relevant data to the casing information associated with the entity further comprises a request for relevant data to the casing information associated with any related identifier of the entity.

11 . The system of claim 10 , wherein any related identifier of the entity comprises identifiers determined using a string metric.

12 . The system of claim 10 , wherein any related identifier of the entity comprises identifiers determined using pattern matching.

13 . The system of claim 9 , wherein the operations further comprising:

providing the data structure for use in performing a downstream task.

14 . The system of claim 13 , wherein the downstream task comprises storing the data structure in a database for subsequent retrieval.

15 . The system of claim 14 , wherein the downstream task comprises:

generating a plurality of data structures for a respective plurality of entities; and

counting a number of data structures that reflect more than one team having one or more cases associated with the respective entity, and at least one of the cases associated with the respective entity having an open status.

16 . One or more non-transitory computer-readable storage media storing instructions that when executed by one or more computers cause the one or more computers to perform operations, comprising:

receiving data of an entity in a digital environment;

initializing a data structure comprising entity information and casing information associated with the entity, wherein the casing information associated with the entity comprises, for each of one or more enterprise team servers corresponding one or more enterprise teams, whether the enterprise team maintains cases regarding the entity, including status of the cases;

transmitting to each of the one or more enterprise team servers, a request comprising a request for relevant data to the casing information associated with the entity;

receiving, from each enterprise team server and in response to the request to each enterprise team server, a response comprising relevant data to casing information associated with the entity;

updating the data structure using the received responses;

determining a corrective action using data regarding one or more ongoing cases corresponding to the entity obtained upon querying the data structure; and

performing the corrective action with respect to the entity

wherein the data structure comprises a first variable that represents an identifier of an entity, a second variable for each enterprise team server that indicates if one or more cases associated with the entity is present in the enterprise team server, and a third variable for each enterprise team server that indicates if one or more of the respective cases associated with the entity has an open status, and

wherein updating the data structure representing casing information associated with the entity using the received responses comprises:

setting every second and third variable to zero;

for each enterprise team server response,

determining if one or more cases associated with the entity is present in the enterprise team server;

in response to determining that one or more cases associated with the entity is present in the enterprise team server, updating the respective second variable to indicate as such;

determining if one or more of the respective cases associated with the entity has an open status; and

in response to determining that one or more of the respective cases associated with the entity has an open status, updating the respective third variable to indicate as such.