THREAT MITIGATION SYSTEM AND METHOD

1 - 60 . (canceled)

61 . A computer-implemented method, executed on a computing device, comprising:

establishing connectivity with a plurality of security-relevant subsystems within a computing platform;

defining a unified query on the a unified platform concerning the plurality of security-relevant subsystems;

defining a plurality of subsystem-specific queries on the unified platform concerning the plurality of security-relevant subsystems, including denormalizing the unified query to define a subsystem-specific query for each of the plurality of security-relevant subsystems, thus defining the plurality of subsystem-specific queries, wherein one or more of the plurality of subsystem-specific queries has a defined execution schedule; and

providing the plurality of subsystem-specific queries to the plurality of security-relevant subsystems.

62 . The computer-implemented method of claim 61 wherein the defined execution schedule is a default execution schedule configured to be revisable by a third-party.

63 . The computer-implemented method of claim 61 wherein the defined execution schedule includes one or more of:

a defined execution time;

a defined execution date;

a defined execution frequency; and

a defined execution scope.

64 . The computer-implemented method of claim 61 further comprising:

determining that one or more of the plurality of subsystem-specific queries failed to execute properly, thus defining one or more failed subsystem-specific queries; and

reexecuting the one or more failed subsystem-specific queries.

65 . The computer-implemented method of claim 61 wherein denormalizing the unified query to define a subsystem-specific query for each of the plurality of security-relevant subsystems, thus defining the plurality of subsystem-specific queries includes:

translating a syntax of the unified query to a syntax of each of the plurality of subsystem-specific queries.

66 . The computer-implemented method of claim 61 further comprising:

receiving a plurality of subsystem-specific results sets from the plurality of security-relevant subsystems that were generated in response to the plurality of subsystem-specific queries.

67 . The computer-implemented method of claim 66 further comprising:

normalizing the plurality of subsystem-specific results sets received from the plurality of security-relevant subsystems to define a unified result set; and

providing the unified result set to a third-party.

68 . The computer-implemented method of claim 67 wherein normalizing the plurality of subsystem-specific results sets received from the plurality of security-relevant subsystems to define a unified result set includes:

translating a syntax of each of the plurality of subsystem-specific results sets to a syntax of the unified result set.

69 . The computer-implemented method of claim 61 wherein the plurality of security-relevant subsystems includes one or more of:

CDN (i.e., Content Delivery Network) systems;

DAM (i.e., Database Activity Monitoring) systems;

UBA (i.e., User Behavior Analytics) systems;

MDM (i.e., Mobile Device Management) systems;

IAM (i.e., Identity and Access Management) systems;

DNS (i.e., Domain Name Server) systems;

Antivirus systems;

operating systems;

data lakes;

data logs;

security-relevant software applications;

security-relevant hardware systems; and

resources external to the computing platform.

70 . A computer program product residing on a non-transitory computer readable medium having a plurality of instructions stored thereon which, when executed by a processor, cause the processor to perform operations comprising:

establishing connectivity with a plurality of security-relevant subsystems within a computing platform;

defining a unified query on the a unified platform concerning the plurality of security-relevant subsystems;

defining a plurality of subsystem-specific queries on the unified platform concerning the plurality of security-relevant subsystems, including denormalizing the unified query to define a subsystem-specific query for each of the plurality of security-relevant subsystems, thus defining the plurality of subsystem-specific queries, wherein one or more of the plurality of subsystem-specific queries has a defined execution schedule; and

providing the plurality of subsystem-specific queries to the plurality of security-relevant subsystems.

71 . The computer program product of claim 70 wherein the defined execution schedule is a default execution schedule configured to be revisable by a third-party.

72 . The computer program product of claim 70 wherein the defined execution schedule includes one or more of:

a defined execution time;

a defined execution date;

a defined execution frequency; and

a defined execution scope.

73 . The computer program product of claim 70 further comprising:

determining that one or more of the plurality of subsystem-specific queries failed to execute properly, thus defining one or more failed subsystem-specific queries; and

reexecuting the one or more failed subsystem-specific queries.

74 . The computer program product of claim 70 wherein denormalizing the unified query to define a subsystem-specific query for each of the plurality of security-relevant subsystems, thus defining the plurality of subsystem-specific queries includes:

translating a syntax of the unified query to a syntax of each of the plurality of subsystem-specific queries.

75 . The computer program product of claim 70 further comprising:

receiving a plurality of subsystem-specific results sets from the plurality of security-relevant subsystems that were generated in response to the plurality of subsystem-specific queries.

76 . The computer program product of claim 75 further comprising:

normalizing the plurality of subsystem-specific results sets received from the plurality of security-relevant subsystems to define a unified result set; and

providing the unified result set to a third-party.

77 . The computer program product of claim 76 wherein normalizing the plurality of subsystem-specific results sets received from the plurality of security-relevant subsystems to define a unified result set includes:

translating a syntax of each of the plurality of subsystem-specific results sets to a syntax of the unified result set.

78 . The computer program product of claim 70 wherein the plurality of security-relevant subsystems includes one or more of:

CDN (i.e., Content Delivery Network) systems;

DAM (i.e., Database Activity Monitoring) systems;

UBA (i.e., User Behavior Analytics) systems;

MDM (i.e., Mobile Device Management) systems;

IAM (i.e., Identity and Access Management) systems;

DNS (i.e., Domain Name Server) systems;

Antivirus systems;

operating systems;

data lakes;

data logs;

security-relevant software applications;

security-relevant hardware systems; and

resources external to the computing platform.

79 . A computing system including a processor and memory configured to perform operations comprising:

establishing connectivity with a plurality of security-relevant subsystems within a computing platform;

defining a unified query on the a unified platform concerning the plurality of security-relevant subsystems;

defining a plurality of subsystem-specific queries on the unified platform concerning the plurality of security-relevant subsystems, including denormalizing the unified query to define a subsystem-specific query for each of the plurality of security-relevant subsystems, thus defining the plurality of subsystem-specific queries, wherein one or more of the plurality of subsystem-specific queries has a defined execution schedule; and

providing the plurality of subsystem-specific queries to the plurality of security-relevant subsystems.

80 . The computing system of claim 79 wherein the defined execution schedule is a default execution schedule configured to be revisable by a third-party.

81 . The computing system of claim 79 wherein the defined execution schedule includes one or more of:

a defined execution time;

a defined execution date;

a defined execution frequency; and

a defined execution scope.

82 . The computing system of claim 79 further comprising:

determining that one or more of the plurality of subsystem-specific queries failed to execute properly, thus defining one or more failed subsystem-specific queries; and

reexecuting the one or more failed subsystem-specific queries.

83 . The computing system of claim 79 wherein denormalizing the unified query to define a subsystem-specific query for each of the plurality of security-relevant subsystems, thus defining the plurality of subsystem-specific queries includes:

translating a syntax of the unified query to a syntax of each of the plurality of subsystem-specific queries.

84 . The computing system of claim 79 further comprising:

receiving a plurality of subsystem-specific results sets from the plurality of security-relevant subsystems that were generated in response to the plurality of subsystem-specific queries.

85 . The computing system of claim 84 further comprising:

normalizing the plurality of subsystem-specific results sets received from the plurality of security-relevant subsystems to define a unified result set; and

providing the unified result set to a third-party.

86 . The computing system of claim 85 wherein normalizing the plurality of subsystem-specific results sets received from the plurality of security-relevant subsystems to define a unified result set includes:

translating a syntax of each of the plurality of subsystem-specific results sets to a syntax of the unified result set.

87 . The computing system of claim 79 wherein the plurality of security-relevant subsystems includes one or more of:

CDN (i.e., Content Delivery Network) systems;

DAM (i.e., Database Activity Monitoring) systems;

UBA (i.e., User Behavior Analytics) systems;

MDM (i.e., Mobile Device Management) systems;

IAM (i.e., Identity and Access Management) systems;

DNS (i.e., Domain Name Server) systems;

Antivirus systems;

operating systems;

data lakes;

data logs;

security-relevant software applications;

security-relevant hardware systems; and

resources external to the computing platform.