1. A system for predictive modeling in a network security service, comprising: a detection service that operates on one or more servers configured to: store a record that describes a threat instance detected in a network in response to a first participant in the network security service registering the detected threat instance with the detection service, wherein the record includes a threat information code that identifies a threat type associated with the threat instance and a subscriber code that uniquely identifies the first participant that registered the threat instance; and return the subscriber code that uniquely identifies the first participant that registered the threat instance to a second participant in the network security service in response to the second participant querying the detection service with the threat information code that identifies the threat type associated with the threat instance; and a hierarchical name service configured to return a location associated with the first participant to the second participant in response to the second participant querying the hierarchical name service with the subscriber code that uniquely identifies the first participant, wherein the location enables the second participant to obtain one or more data attributes associated with the threat instance from the first participant.