IP Library › Granted Patent US 12,541,508
Granted Patent B2
US 12,541,508 · App. 18/755,386 · Granted Feb 3, 2026

AI-powered macros to process complex NLP queries across domains

Inventors: Chandra Biksheswaran Mouleeswaran (Cupertino, CA); Sathya Prakash Rajagopal (San Jose, CA); Gaspar Modelo-Howard (Fremont, CA); Alok Tongaonkar (San Jose, CA)
Assignee: Palo Alto Networks, Inc.
G06F16/243G06F16/2433G06F16/248G06F21/577
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,541,508
App. No.
18/755,386
Granted
Feb 3, 2026
Kind
B2
Abstract

Techniques for AI-powered macros to process complex natural language processing (NLP) across domains are disclosed. In some embodiments, a system, a process, and/or a computer program product for AI-powered macros to process complex NLP across domains includes processing a natural language query; performing a cross-domain search to generate a search result using a plurality of data source domains using a resource query language (RQL) and a Large Language Model (LLM); and outputting the search result.

Claims (46)

1 . A system, comprising:

a processor configured to:

process a natural language query;

perform a cross-domain search to generate a search result using a plurality of data source domains using a resource query language (RQL) and a Large Language Model (LLM), comprising to:

generate a structured JSON representation related to the natural language query;

search, based on a generic asset query associated with the structured JSON representation, a vulnerability database to obtain a set of vulnerabilities; and

perform, based a ranked set of RQLs covering a set of asset types, a search to generate the search result, wherein the set of asset types relate to information retrieved from the information retrieval, wherein the ranked set of RQLs relates to the set of vulnerabilities, wherein the ranked set of RQLs includes a plurality of RQLs; and

output the search result; and

a memory coupled to the processor and configured to provide the processor with instructions.

2 . The system of claim 1 , wherein performing the cross-domain search to generate the search result using the plurality of data source domains further includes using a planner, executor, and aggregator to collect distinct results from each of the plurality of data source domains.

3 . The system of claim 1 , wherein performing the cross-domain search to generate the search result using the plurality of data source domains further includes using a planner, executor, and aggregator to collect distinct results from each of the plurality of data source domains and further using an application programming interface (API).

4 . The system of claim 1 , wherein the plurality of data source domains includes a configuration data set, an Identity and Asset Management (IAM) data set, and a vulnerability data set.

5 . The system of claim 1 , wherein the RQL is generated for RQL for multi-domain security applications.

6 . The system of claim 1 , wherein the LLM is trained for performing automated entity extraction for multi-domain security applications.

7 . The system of claim 1 , wherein the processor is further configured to:

generate an output graph of assets in response to the natural language query.

8 . The system of claim 1 , wherein the processor is further configured to:

execute the ranked set of RQLs in a ranked order and aggregate results for the search result.

9 . A method, comprising:

processing a natural language query;

performing a cross-domain search to generate a search result using a plurality of data source domains using a resource query language (RQL) and a Large Language Model (LLM); (LLM), comprising:

generating a structured JSON representation related to the natural language query;

searching, based on a generic asset query associated with the structured JSON representation, a vulnerability database to obtain a set of vulnerabilities; and

performing, based a ranked set of RQLs covering a set of asset types, a search to generate the search result, wherein the set of asset types relate to information retrieved from the information retrieval, wherein the ranked set of ROLs relates to the set of vulnerabilities, wherein the ranked set of RQLs includes a plurality of RQLs; and

outputting the search result.

10 . The method of claim 9 , wherein performing the cross-domain search to generate the search result using the plurality of data source domains further includes using a planner, executor, and aggregator to collect distinct results from each of the plurality of data source domains.

11 . The method of claim 9 , wherein performing the cross-domain search to generate the search result using the plurality of data source domains further includes using a planner, executor, and aggregator to collect distinct results from each of the plurality of data source domains and further using an application programming interface (API).

12 . The method of claim 9 , wherein the plurality of data source domains includes a configuration data set, an Identity and Asset Management (IAM) data set, and a vulnerability data set.

13 . The method of claim 9 , further comprising:

generating an output graph of assets in response to the natural language query.

14 . The method of claim 9 , further comprising:

executing the ranked set of RQLs in a ranked order and aggregating results for the search result.

15 . A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:

processing a natural language query;

performing a cross-domain search to generate a search result using a plurality of data source domains using a resource query language (RQL) and a Large Language Model; (LLM), comprising:

generating a structured JSON representation related to the natural language query;

searching, based on a generic asset query associated with the structured JSON representation, a vulnerability database to obtain a set of vulnerabilities; and

performing, based a ranked set of RQLs covering a set of asset types, a search to generate the search result, wherein the set of asset types relate to information retrieved from the information retrieval, wherein the ranked set of ROLs relates to the set of vulnerabilities, wherein the ranked set of RQLs includes a plurality of RQLs; and

outputting the search result.

16 . The computer program product of claim 15 , wherein performing the cross-domain search to generate the search result using the plurality of data source domains further includes using a planner, executor, and aggregator to collect distinct results from each of the plurality of data source domains.

17 . The computer program product of claim 15 , wherein performing the cross-domain search to generate the search result using the plurality of data source domains further includes using a planner, executor, and aggregator to collect distinct results from each of the plurality of data source domains and further using an application programming interface (API).

18 . The computer program product of claim 15 , wherein the plurality of data source domains includes a configuration data set, an Identity and Asset Management (IAM) data set, and a vulnerability data set.

19 . The computer program product of claim 15 , further comprising computer instructions for:

generating an output graph of assets in response to the natural language query.

20 . The computer program product of claim 15 , further comprising computer instructions for:

executing the ranked set of RQLs in a ranked order and aggregating results for the search result.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Sep 10, 2024
From: MOULEESWARAN, CHANDRA BIKSHESWARAN; RAJAGOPAL, SATHYA PRAKASH; MODELO-HOWARD, GASPAR; TONGAONKAR, ALOK
To: PALO ALTO NETWORKS, INC.
Reel/Frame 068544/0960 →
Continuity (2)
Provisional Application 63568851 · Mar 22, 2024
Related Publication 20250298807A1 · Sep 25, 2025
References Cited (13)
US 11017764B1 · Das · 2021 [cited by applicant]
US 11416563B1 · Spagnolo · 2022 [cited by examiner]
US 12061970B1 · Lo · 2024 [cited by examiner]
US 20100191855A1 · Tian · 2010 [cited by examiner]
US 20150332670A1 · Akbacak · 2015 [cited by applicant]
US 20210182935A1 · Malkiel · 2021 [cited by applicant]
US 20210303555A1 · Kim · 2021 [cited by examiner]
US 20220230089A1 · Peraud · 2022 [cited by applicant]
US 20240202464A1 · Poirier · 2024 [cited by applicant]
US 20250036616A1 · Wang · 2025 [cited by examiner]
Wang et al., Grammar Prompting for Domain-Specific Language Generation with Large Language Models, 37th Conference on Neural Information Processing Systems (NeurIPS 2023), pp. 1-26. [cited by applicant]
Yamin et al., Applications of LLMs for Generating Cyber Security Exercise Scenarios, Feb. 26, 2024, pp. 1-17. [cited by applicant]
Yang et al., LeanDojo: Theorem Proving with Retrieval-Augmented Language Models, 37th Conference on Neural Information Processing Systems (NeurIPS 2023) Track on Datasets and Benchmarks, pp. 1-40. [cited by applicant]