Text this: Two-layer threat analysis model integrating macro and micro