Security content delivery based on tagged personas

1. A system for event remediation content selection based on user persona comprising:

at least one processor; and

memory including instructions that, when executed by the at least one processor, cause the at least one processor to perform operations to:

obtain user data for a user of a network file system from user attributes associated with user accessible services provided within the network file system;

extract attributes from the user data to establish the user persona;

obtain event data for a security event experienced by the network file system, the security event associated with the user;

identify a set of available remediation content items using the event data;

select a content item from the set of available remediation content items using the user persona;

determine a transmission medium for transmission of the content item to the user using the user persona based on content consumption attributes of the user contained in the user persona; and

transmit the content item to the user via the transmission medium.

2. The system of claim 1 , wherein the user data is obtained from a network directory service, an identify management system, a single-sign-on (SSO) system, a human resources information system, a human capital management system, or user maintained preferences.

3. The system of claim 1 , wherein the attributes include at least one of a job title of the user, a work department of the user, a billing code of the user, or system usage history of the user.

4. The system of claim 1 , wherein the event data includes at least one of an event type, a criticality attribute, a timestamp, or an event description.

5. The system of claim 1 , wherein the set of available remediation content items includes a video content item, a text-based content item, or a remediation script.

6. The system of claim 1 , the memory further comprising instructions that, when executed by the at least one processor, cause the at least one processor to perform operations to:

obtain a set of training user content consumption data and a set of event information training data;

determine features of the set of training user content consumption data and the set of event information training data;

extract the features from the set of training user content consumption data and the set of event information training data; and

generate, using a machine learning algorithm, a content selection model using the features.

7. The system of claim 6 , the instructions to select the content item further comprising instructions that, when executed by the at least one processor, cause the at least one processor to perform operations to:

extract features from the user persona and the event data;

apply the features to the content selection model to produce user content consumption preference output for the security event for the user; and

evaluate the set of available remediation content items using the user content consumption preference output to select the content item.

8. The system of claim 1 , the instructions to determine the transmission medium for transmission of the content item to the user using the user persona further comprising instructions that, when executed by the at least one processor, cause the at least one processor to perform operations to:

evaluate usage statistics of the user for a set of transmission mediums used by the user to calculate a frequency of usage value for each transmission medium of the set of transmission mediums; and

determine the transmission medium as the transmission medium of the set of transmission mediums with a highest frequency of usage value.

9. At least one non-transitory machine-readable medium including instructions for event remediation content selection based on user persona that, when executed by at least one processor, cause the at least one processor to perform operations to:

obtain user data for a user of a network file system from user attributes associated with user accessible services provided within the network file system;

extract attributes from the user data to establish the user persona;

obtain event data for a security event experienced by the network file system, the security event associated with the user;

identify a set of available remediation content items using the event data;

select a content item from the set of available remediation content items using the user persona;

determine a transmission medium for transmission of the content item to the user using the user persona based on content consumption attributes of the user contained in the user persona; and

transmit the content item to the user via the transmission medium.

10. The at least one non-transitory machine-readable medium of claim 9 , further comprising instructions that, when executed by the at least one processor, cause the at least one processor to perform operations to:

obtain a set of training user content consumption data and a set of event information training data;

determine features of the set of training user content consumption data and the set of event information training data;

extract the features from the set of training user content consumption data and the set of event information training data; and

generate, using a machine learning algorithm, a content selection model using the features.

11. The at least one non-transitory machine-readable medium of claim 10 , the instructions to select the content item further comprising instructions that, when executed by the at least one processor, cause the at least one processor to perform operations to:

extract features from the user persona and the event data;

apply the features to the content selection model to produce user content consumption preference output for the security event for the user; and

evaluate the set of available remediation content items using the user content consumption preference output to select the content item.

12. The at least one non-transitory machine-readable medium of claim 9 , the instructions to determine the transmission medium for transmission of the content item to the user using the user persona further comprising instructions that, when executed by the at least one processor, cause the at least one processor to perform operations to:

evaluate usage statistics of the user for a set of transmission mediums used by the user to calculate a frequency of usage value for each transmission medium of the set of transmission mediums; and

determine the transmission medium as the transmission medium of the set of transmission mediums with a highest frequency of usage value.

13. A method for event remediation content selection based on user persona comprising:

obtaining user data for a user of a network file system from user attributes associated with user accessible services provided within the network file system;

extracting attributes from the user data to establish the user persona;

obtaining event data for a security event experienced by the network file system, the security event associated with the user;

identifying a set of available remediation content items using the event data;

selecting a content item from the set of available remediation content items using the user persona;

determining a transmission medium for transmission of the content item to the user using the user persona based on content consumption attributes of the user contained in the user persona; and

transmitting the content item to the user via the transmission medium.

14. The method of claim 13 , wherein the user data is obtained from a network directory service, an identify management system, a single-sign-on (SSO) system, a human resources information system, a human capital management system, or user maintained preferences.

15. The method of claim 13 , wherein the attributes include at least one of a job title of the user, a work department of the user, a billing code of the user, or system usage history of the user.

16. The method of claim 13 , wherein the event data includes at least one of an event type, a criticality attribute, a timestamp, or an event description.

17. The method of claim 13 , wherein the set of available remediation content items includes a video content item, a text-based content item, or a remediation script.

18. The method of claim 13 , further comprising:

obtaining a set of training user content consumption data and a set of event information training data;

determining features of the set of training user content consumption data and the set of event information training data;

extracting the features from the set of training user content consumption data and the set of event information training data; and

generating, using a machine learning algorithm, a content selection model using the features.

19. The method of claim 18 , wherein selecting the content item further comprises:

extracting features from the user persona and the event data;

applying the features to the content selection model to produce user content consumption preference output for the security event for the user; and

evaluating the set of available remediation content items using the user content consumption preference output to select the content item.

20. The method of claim 13 , wherein determining the transmission medium for transmission of the content item to the user using the user persona further comprises:

evaluating usage statistics of the user for a set of transmission mediums used by the user to calculate a frequency of usage value for each transmission medium of the set of transmission mediums; and

determining the transmission medium as the transmission medium of the set of transmission mediums with a highest frequency of usage value.