The increasing number of previously unseen malware and malicious infrastructure (domains, URLs etc.) makes alert triage, validation, and enrichment very difficult. Security analysts spend a considerable amount of time investigating phishing and endpoint malware alerts. Gaining unmatched insights into the new threats requires a fresh approach to the threat analysis and investigation processes.