SYSTEM AND METHOD FOR CODIFICATION AND REPRESENTATION OF SITUATIONAL AND COMPLEX APPLICATION BEHAVIORAL PATTERNS

Systems and methods may receive process data corresponding to respective activated processes performed in a network. The process data may include identity data and activity data. The identity data may identify an identity that activated the respective activated processes. The activity data may identify a function performed by the respective activated processes. The systems and methods may determine an identity token that corresponds to the identity data. The systems and methods may determine an activity token that corresponds to the activity data. The systems and methods may determine log data for the respective activated processes. The log data may include the identity token and the activity token for each of the respective activated processes. The systems and methods may generate a map based on the log data.