Computer software to control, manage, maintain and operate computer systems and networks; Computer operating software; Computer application software for layered security or stacking network-wide security functions, based on adapted language, namely, software for collection of security events by a third party, network telemetry, processed telemetry by third party; software for detection algorithms to detect abnormal events and patterns based on telemetry or collected security events or any other method of information fusion; software for cyber business logic to determine the best method for an investigation and a mitigation strategy and implement or recommend the mitigation devices, groups or any other investigation and mitigation facility; software for programmable network interaction that utilizes various network types and protocols to program the network to divert suspicious traffic after being detected, for further investigation and mitigation, and programming security devices and network devices for investigation and mitigation; software for dynamic signaling for event distribution or configuration and activation of security mitigation policies within a selected security device or group, and software for security orchestration or plugin