The result is a software that enables both humans and machines to create advanced analytical queries over security telemetry and contextual data within a relational paradigm. This solution organizes data into primary data models in the relational paradigm, which can be further extended and transformed with advanced analytical logic into derived data models. This derivation can be achieved either via explicit orchestration of SQL queries or through general business logic. The solution enables historical and aggregation analytical queries based on direct querying, including queries across distributed tables. The result also includes procedures for machine learning algorithms applied to telemetry data. A substantial part of the solution consists of a dedicated component for advanced analysis of an organization’s security posture.