INCREMENTAL VIRTUAL MACHINE METADATA EXTRACTION

    公开(公告)号:US20220138163A1

    公开(公告)日:2022-05-05

    申请号:US17489536

    申请日:2021-09-29

    Applicant: Cohesity, Inc.

    Abstract: A virtual machine container file is analyzed to determine which portion of the virtual machine container file corresponds to a virtual machine file system metadata of the virtual machine container file. One or more differences between a first version of a virtual machine container file and a second version of the virtual machine container file are determined at least in part by traversing a snapshot structure associated with the virtual machine container file. The determined one or more differences that corresponds to the virtual machine file system metadata portion of the virtual machine container file are identified based at least in part on the analysis of the virtual machine container file. The identified one or more differences corresponding to the virtual machine file system metadata portion of the virtual machine file are utilized to identify one or more changes from the content files included in the first version of the virtual machine container file to content files included in the second version of the virtual machine container file.

    Malicious software detection
    2.
    发明授权

    公开(公告)号:US10943011B2

    公开(公告)日:2021-03-09

    申请号:US16832503

    申请日:2020-03-27

    Applicant: Cohesity, Inc.

    Abstract: An amount of data change associated with a version of a content file with respect to one or more previous versions of the content file is determined. The amount of change associated with the version of the content file is determined using a tree data structure associated with the content file that is stored on a storage cluster. One or more statistics associated with backup snapshot are provided to a server. The server is configured to determine that the amount of data change associated with the version of the content file is anomalous based in part on the one or more statistics associated with the backup snapshot. A notification that data associated with the backup snapshot is potentially infected by malicious software is received from the server. The version of the content file is indicated as being potentially infected by malicious software.

    Malicious software detection
    3.
    发明授权

    公开(公告)号:US10650146B1

    公开(公告)日:2020-05-12

    申请号:US16372230

    申请日:2019-04-01

    Applicant: Cohesity, Inc.

    Abstract: An amount of data change associated with a version of a content file with respect to one or more previous versions of the content file is determined. The amount of change associated with the version of the content file is determined using a tree data structure associated with the content file that is stored on a storage cluster. One or more statistics associated with backup snapshot are provided to a server. The server is configured to determine that the amount of data change associated with the version of the content file is anomalous based in part on the one or more statistics associated with the backup snapshot. A notification that data associated with the backup snapshot is potentially infected by malicious software is received from the server. The version of the content file is indicated as being potentially infected by malicious software.

    Incremental virtual machine metadata extraction

    公开(公告)号:US10534759B1

    公开(公告)日:2020-01-14

    申请号:US16110314

    申请日:2018-08-23

    Applicant: Cohesity, Inc.

    Abstract: A virtual machine container file is analyzed to determine which portion of the virtual machine container file corresponds to a virtual machine file system metadata of the virtual machine container file. One or more differences between a first version of a virtual machine container file and a second version of the virtual machine container file are determined at least in part by traversing a snapshot structure associated with the virtual machine container file. The determined one or more differences that corresponds to the virtual machine file system metadata portion of the virtual machine container file are identified based at least in part on the analysis of the virtual machine container file. The identified one or more differences corresponding to the virtual machine file system metadata portion of the virtual machine file are utilized to identify one or more changes from the content files included in the first version of the virtual machine container file to content files included in the second version of the virtual machine container file.

    Incremental virtual machine metadata extraction

    公开(公告)号:US11176102B2

    公开(公告)日:2021-11-16

    申请号:US16705078

    申请日:2019-12-05

    Applicant: Cohesity, Inc.

    Abstract: A virtual machine container file is analyzed to determine which portion of the virtual machine container file corresponds to a virtual machine file system metadata of the virtual machine container file. One or more differences between a first version of a virtual machine container file and a second version of the virtual machine container file are determined at least in part by traversing a snapshot structure associated with the virtual machine container file. The determined one or more differences that corresponds to the virtual machine file system metadata portion of the virtual machine container file are identified based at least in part on the analysis of the virtual machine container file. The identified one or more differences corresponding to the virtual machine file system metadata portion of the virtual machine file are utilized to identify one or more changes from the content files included in the first version of the virtual machine container file to content files included in the second version of the virtual machine container file.

    MALICIOUS SOFTWARE DETECTION
    6.
    发明申请

    公开(公告)号:US20200226256A1

    公开(公告)日:2020-07-16

    申请号:US16832503

    申请日:2020-03-27

    Applicant: Cohesity, Inc.

    Abstract: An amount of data change associated with a version of a content file with respect to one or more previous versions of the content file is determined. The amount of change associated with the version of the content file is determined using a tree data structure associated with the content file that is stored on a storage cluster. One or more statistics associated with backup snapshot are provided to a server. The server is configured to determine that the amount of data change associated with the version of the content file is anomalous based in part on the one or more statistics associated with the backup snapshot. A notification that data associated with the backup snapshot is potentially infected by malicious software is received from the server. The version of the content file is indicated as being potentially infected by malicious software.

    Malicious software detection
    7.
    发明授权

    公开(公告)号:US11983270B2

    公开(公告)日:2024-05-14

    申请号:US17156050

    申请日:2021-01-22

    Applicant: Cohesity, Inc.

    CPC classification number: G06F21/565 G06F16/2365

    Abstract: An amount of data change associated with a version of a content file with respect to one or more previous versions of the content file is determined. The amount of change associated with the version of the content file is determined using a tree data structure associated with the content file that is stored on a storage cluster. One or more statistics associated with backup snapshot are provided to a server. The server is configured to determine that the amount of data change associated with the version of the content file is anomalous based in part on the one or more statistics associated with the backup snapshot. A notification that data associated with the backup snapshot is potentially infected by malicious software is received from the server. The version of the content file is indicated as being potentially infected by malicious software.

    Incremental virtual machine metadata extraction

    公开(公告)号:US11782886B2

    公开(公告)日:2023-10-10

    申请号:US17489536

    申请日:2021-09-29

    Applicant: Cohesity, Inc.

    CPC classification number: G06F16/188 G06F16/128

    Abstract: A virtual machine container file is analyzed to determine which portion of the virtual machine container file corresponds to a virtual machine file system metadata of the virtual machine container file. One or more differences between a first version of a virtual machine container file and a second version of the virtual machine container file are determined at least in part by traversing a snapshot structure associated with the virtual machine container file. The determined one or more differences that corresponds to the virtual machine file system metadata portion of the virtual machine container file are identified based at least in part on the analysis of the virtual machine container file. The identified one or more differences corresponding to the virtual machine file system metadata portion of the virtual machine file are utilized to identify one or more changes from the content files included in the first version of the virtual machine container file to content files included in the second version of the virtual machine container file.

    MALICIOUS SOFTWARE DETECTION
    9.
    发明申请

    公开(公告)号:US20210240828A1

    公开(公告)日:2021-08-05

    申请号:US17156050

    申请日:2021-01-22

    Applicant: Cohesity, Inc.

    Abstract: An amount of data change associated with a version of a content file with respect to one or more previous versions of the content file is determined. The amount of change associated with the version of the content file is determined using a tree data structure associated with the content file that is stored on a storage cluster. One or more statistics associated with backup snapshot are provided to a server. The server is configured to determine that the amount of data change associated with the version of the content file is anomalous based in part on the one or more statistics associated with the backup snapshot. A notification that data associated with the backup snapshot is potentially infected by malicious software is received from the server. The version of the content file is indicated as being potentially infected by malicious software.

Patent Agency Ranking