Responding to alerts
    11.
    发明授权

    公开(公告)号:US11240263B2

    公开(公告)日:2022-02-01

    申请号:US15420521

    申请日:2017-01-31

    Abstract: In some examples, an alert relating to an issue in a computing arrangement is received. It is determined that the received alert is similar to a given alert in an information repository containing information of past processes performed to address respective issues, the determining comprising comparing a property associated with the received alert to a property of alerts associated with the past processes, and the information contained in the information repository comprising actions taken in the past processes to address the respective issues. Performance of a remediation action is triggered that comprises an action, identified by the information in the information repository, taken to respond to the given alert.

    Scoring for threat observables
    12.
    发明授权

    公开(公告)号:US10289838B2

    公开(公告)日:2019-05-14

    申请号:US15116847

    申请日:2014-02-21

    Abstract: Example embodiments disclosed herein relate to determining threat scores for threat observables. Information about multiple threat observables are received from providing entities. The information about the threat observables include at least one attribute about a respective threat associated with the threat observable. Threat scores are determined for the respective threat observables for multiple entities. In one example, a first score of a first one of the threat observables is determined and is different than a second score of the first threat observable for a second entity based on a treatment of the attribute(s).

    RESPONDING TO ALERTS
    13.
    发明申请

    公开(公告)号:US20180219911A1

    公开(公告)日:2018-08-02

    申请号:US15420521

    申请日:2017-01-31

    CPC classification number: H04L63/1441 H04L63/1416 H04L63/20

    Abstract: In some examples, an alert relating to an issue in a computing arrangement is received. It is determined that the received alert is similar to a given alert in an information repository containing information of past processes performed to address respective issues, the determining comprising comparing a property associated with the received alert to a property of alerts associated with the past processes, and the information contained in the information repository comprising actions taken in the past processes to address the respective issues. Performance of a remediation action is triggered that comprises an action, identified by the information in the information repository, taken to respond to the given alert.

    SCORING FOR THREAT OBSERVABLES
    18.
    发明申请
    SCORING FOR THREAT OBSERVABLES 审中-公开
    评估威胁观察员

    公开(公告)号:US20160378978A1

    公开(公告)日:2016-12-29

    申请号:US15116847

    申请日:2014-02-21

    Abstract: Example embodiments disclosed herein relate to determining threat scores for threat observables. Information about multiple threat observables are received from providing entities. The information about the threat observables include at least one attribute about a respective threat associated with the threat observable. Threat scores are determined for the respective threat observables for multiple entities. In one example, a first score of a first one of the threat observables is determined and is different than a second score of the first threat observable for a second entity based on a treatment of the attribute(s).

    Abstract translation: 本文公开的示例性实施例涉及确定威胁可观测量的威胁分数。 从提供实体收到有关多个威胁可观测资料的信息。 关于可观察威胁的信息包括关于与可观察威胁相关联的相应威胁的至少一个属性。 威胁分数是针对多个实体的相应威胁可观察量确定的。 在一个示例中,确定威胁可观测器中的第一个的第一分数,并且不同于基于对该属性的处理的第二实体可观察到的第一威胁的第二分数。

Patent Agency Ranking