中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

45 records (took 0.037 seconds)

    Generating investigation timeline displays including user-selected screenshots
    32.
    发明授权
    Generating investigation timeline displays including user-selected screenshots 有权

    公开(公告)号：US11641372B1

    公开(公告)日：2023-05-02

    申请号：US17827137

    申请日：2022-05-27

    Applicant: Splunk Inc.

    Inventor： Vijay Chauhan ,  Cary Noel ,  Wenhui Yu ,  Luke Murphey ,  Alexander Raitz ,  David Hazekamp

    IPC: H04L9/40 ,  G06F3/0484 ,  G06F16/25 ,  G06F16/248 ,  G06F16/2458 ,  H04L43/026 ,  G06F40/169 ,  G06F21/62 ,  H04L43/06

    Abstract: Techniques and mechanisms are disclosed that enable network security analysts and other users to efficiently conduct network security investigations and to produce useful representations of investigation results. As used herein, a network security investigation generally refers to an analysis by an analyst (or team of analysts) of one or more detected network events that may pose internal and/or external threats to a computer network under management. A network security application provides various interfaces that enable users to create investigation timelines, where the investigation timelines display a collection of events related to a particular network security investigation. A network security application further provides functionality to monitor and log user interactions with the network security application, where particular logged user interactions may also be added to one or more investigation timelines.

    Assigning workflow network security investigation actions to investigation timelines
    33.
    发明授权
    Assigning workflow network security investigation actions to investigation timelines 有权

    公开(公告)号：US11132111B2

    公开(公告)日：2021-09-28

    申请号：US16264568

    申请日：2019-01-31

    Applicant: Splunk Inc.

    Inventor： Vijay Chauhan ,  Cary Noel ,  Wenhui Yu ,  Luke Murphey

    IPC: G06F3/0484 ,  H04L29/06

    Abstract: Techniques and mechanisms are disclosed that enable network security analysts and other users to efficiently conduct network security investigations and to produce useful representations of investigation results. As used herein, a network security investigation generally refers to an analysis by an analyst (or team of analysts) of one or more detected network events that may pose internal and/or external threats to a computer network under management. A network security application provides various interfaces that enable users to create investigation timelines, where the investigation timelines display a collection of events related to a particular network security investigation. A network security application further provides functionality to monitor and log user interactions with the network security application, where particular logged user interactions may also be added to one or more investigation timelines.

    Selecting Network Security Event Investigation Timelines in a Workflow Environment
    36.
    发明申请
    Selecting Network Security Event Investigation Timelines in a Workflow Environment 审中-公开

    公开(公告)号：US20190166145A1

    公开(公告)日：2019-05-30

    申请号：US16264554

    申请日：2019-01-31

    Applicant: Splunk Inc.

    Inventor： Vijay Chauhan ,  Cary Noel ,  Wenhui Yu

    IPC: H04L29/06 ,  G06F21/57 ,  G06F21/55 ,  H04L12/26 ,  H04L12/24 ,  G06F16/951

    Abstract: Techniques and mechanisms are disclosed that enable network security analysts and other users to efficiently conduct network security investigations and to produce useful representations of investigation results. As used herein, a network security investigation generally refers to an analysis by an analyst (or team of analysts) of one or more detected network events that may pose internal and/or external threats to a computer network under management. A network security application provides various interfaces that enable users to create investigation timelines, where the investigation timelines display a collection of events related to a particular network security investigation. A network security application further provides functionality to monitor and log user interactions with the network security application, where particular logged user interactions may also be added to one or more investigation timelines.

    Selecting network security investigation timelines based on identifiers
    37.
    发明授权
    Selecting network security investigation timelines based on identifiers 有权

    公开(公告)号：US10237292B2

    公开(公告)日：2019-03-19

    申请号：US15143566

    申请日：2016-04-30

    Applicant: Splunk Inc.

    Inventor： Vijay Chauhan ,  Cary Noel ,  Wenhui Yu

    IPC: H04L12/26 ,  H04L29/06 ,  H04L12/24 ,  G06F17/30 ,  G06F21/55 ,  G06F21/57 ,  G06F21/62

    Abstract: Techniques and mechanisms are disclosed that enable network security analysts and other users to efficiently conduct network security investigations and to produce useful representations of investigation results. As used herein, a network security investigation generally refers to an analysis by an analyst (or team of analysts) of one or more detected network events that may pose internal and/or external threats to a computer network under management. A network security application provides various interfaces that enable users to create investigation timelines, where the investigation timelines display a collection of events related to a particular network security investigation. A network security application further provides functionality to monitor and log user interactions with the network security application, where particular logged user interactions may also be added to one or more investigation timelines.

    Configuring the generation of event data based on a triggering search query
    38.
    发明授权
    Configuring the generation of event data based on a triggering search query 有权

    公开(公告)号：US10193916B2

    公开(公告)日：2019-01-29

    申请号：US15799167

    申请日：2017-10-31

    Applicant: Splunk Inc.

    Inventor： Vijay Chauhan ,  Devendra M. Badhani ,  Luke K. Murphey ,  David Hazekamp

    IPC: H04L29/06

    Abstract: The disclosed embodiments provide a system that facilitates the processing of network data. During operation, the system provides a risk-identification mechanism for identifying a security risk from time-series event data generated from network packets captured by one or more remote capture agents distributed across a network. Next, the system provides a capture trigger for generating additional time-series event data from the network packets on the one or more remote capture agents based on the security risk, wherein the additional time-series event data includes one or more event attributes.

    User activity monitoring by use of rule-based search queries
    39.
    发明授权
    User activity monitoring by use of rule-based search queries 有权

    公开(公告)号：US10185821B2

    公开(公告)日：2019-01-22

    申请号：US15799975

    申请日：2017-10-31

    Applicant: Splunk Inc.

    Inventor： Ravi Iyer ,  Devendra Badhani ,  Vijay Chauhan

    IPC: G06F17/30 ,  G06F21/55 ,  G06Q10/00 ,  G06F21/56

    Abstract: Systems and methods are disclosed for associating an entity with a risk score that may indicate a security threat associated with the entity's activity. An exemplary method may involve monitoring the activity of a subset of the set of entities (e.g., entities included in a watch list) by executing a search query against events indicating the activity of the subset of entities. The events may be associated with timestamps and may include machine data. Executing the search query may produce search results that pertain to activity of a particular entity from the subset. The search results may be evaluated based on a triggering condition corresponding to the statistical baseline. When the triggering condition is met, a risk score for the particular entity may be updated. The updated risk score may be displayed to a user via a graphical user interface (GUI).

Patent Agency Ranking