1. A computer-implemented method for detecting and reporting an internet cyber threat, the method comprising: collecting a plurality of cyber threat data for an incident from a plurality of threat intelligence sources; weighting the cyber threat data based on past performance by the threat intelligence source providing the data; sorting the cyber threat data by severity and reliability for providing indicators for the incident; connecting to a client system; monitoring incidents of the cyber threats on the client system; retrieving incidents detected on the client system; storing the incidents in an incident database; selecting at least one incident from the incident database by an analyst; displaying known information about the at least one incident to the analyst; analyzing the incident by the analyst based on the indicators of the cyber threat data; transmitting an incident report to the client system by the analyst, wherein the incident report includes a recommended course of action and modification to the user system; closing the incident report; and updating a the incident database with the closed incident report.