A system and method for contextually analyzing potential cyber security threats. The method comprises receiving at least one event, wherein the at least one event is associated with at least one entity; parsing the at least one event; modeling, based on at least one modeling rule, the at least one parsed event to determine the at least one characteristic; and generating a graph based on the determined at least one characteristic, wherein the graph represents the relationships among the at least one entity.