A system for integrated natural language programming (“NLP”) and event analysis provides threat detection in computing systems. In particular, the system may use an NLP unit to analyze threat logs from various sources according to multiple different metrics and/or analysis paradigms. Upon completing the analysis, the system may extract, via machine learning, event and/or threat patterns which may be integrated into the system's threat detection processes.