公开(公告)号：US20230350900A1

公开(公告)日：2023-11-02

申请号：US17733155

申请日：2022-04-29

Applicant: MICROSOFT TECHNOLOGY LICENSING, LLC

Inventor： Gueorgui Bonov CHKODROV ,  Ryan John LITTLEFIELD ,  Jeffrey Scott SHAW ,  Zane Alexander COPPEDGE ,  Ying QIAN ,  Dan Alexandru NICOLESCU ,  Anitta M MILLER ,  Khoi HONG ,  Justin Matthew POWELL

IPC: G06F16/2455 ,  G06F16/21 ,  G06F16/28

CPC classification number: G06F16/24568 ,  G06F16/211 ,  G06F16/285

Abstract: Methods, systems, and computer storage media for providing observation stream data of security incidents using an observation stream engine in a security management system. An observation stream framework supports continuously generating and presenting observation stream data that facilitates developing a working hypothesis of an active security incident. The observation stream framework can also include observation stream query-types that can be selected for running queries against a plurality of security data sources. In operation, an observation stream query is accessed. The observation stream query is a user-generated observation stream query associated with an observation stream query-type. The observation stream query-type comprises parameters for querying a plurality of security data sources and dynamic tracking of a security incident. The observation stream query is executed and observation stream data is generated. The observation stream data is caused to be displayed on an observation stream interface comprising data visualizations of the observation stream data.

公开(公告)号：US20230236875A1

公开(公告)日：2023-07-27

申请号：US17585368

申请日：2022-01-26

Applicant: Microsoft Technology Licensing, LLC

Inventor： Gueorgui Bonov CHKODROV ,  Dan Alexandru NICOLESCU ,  Khoi HONG ,  Anitta Maria MILLER ,  Jose Wilson MORRIS ,  Juan Miguel PAREDES ,  Justin Matthew POWELL

IPC: G06F9/48

CPC classification number: G06F9/4843 ,  G06F2209/481

Abstract: The handling of protocol exceptions for deterministic code that communicates with external component(s). A protocol exception host updates an execution state object associated with the deterministic code as the execution of the deterministic code proceeds. The component also detects whether a protocol exception has occurred that was caused by the deterministic code communicating using the protocol with an external component. If the component detects that such a protocol exception has occurred, the component handles the protocol exception. The component also determines whether the handled protocol exception has been successfully handled. If the exception is not successfully handled, the component stops the execution of the deterministic code such that the execution state object includes execution state of the deterministic code up to the stop. Accordingly, the execution state of the deterministic code up to the stop may be later used to resume execution of the deterministic code.

公开(公告)号：US20240329952A1

公开(公告)日：2024-10-03

申请号：US18190278

申请日：2023-03-27

Applicant: Microsoft Technology Licensing, LLC

Inventor： Anitta Maria MILLER ,  Sangeetha MADDERLA ,  Cody Ray CRANFILL ,  Joshua Thomas NIELSEN ,  Lori Ann MURRAY ,  Jason Lancaster MOCK ,  Gueorgui Bonov CHKODROV ,  Dan Alexandru NICOLESCU ,  Akrem Juneidi BASHA ,  William Duncan MACKENZIE

IPC: G06F8/41

CPC classification number: G06F8/433

Abstract: Techniques for generating a workflow diagram automatically from code are described herein. The diagram can be generated in real-time with code changes or as a batch-processing operation to generate drawings as documentation. An extent delineator is identified in the source code. Based on the location of that extent delineator, a determination is made that multiple lines of the source code share a relationship with one another. An extent is formed by grouping those lines together. An AST, which is based on the code, is accessed. Multiple AST nodes are identified. These nodes correspond to the extent. A flowchart is generated based on (i) the AST, (ii) the source code, and (iii) the extent delineator. One of the flowchart nodes commonly represents the multiple AST nodes corresponding to the extent. This flowchart node is annotated with text that generally describes that node's logic.

公开(公告)号：US20210051082A1

公开(公告)日：2021-02-18

申请号：US16538608

申请日：2019-08-12

Applicant: Microsoft Technology Licensing, LLC

Inventor： William Kendall HOLLIS ,  Gueorgui Bonov CHKODROV ,  David Lloyd FOSTH ,  Jose Wilson MORRIS ,  Russell E. BILES

IPC: H04L12/26 ,  H04L29/06 ,  G06F16/903 ,  G06F16/9035

Abstract: According to examples, an apparatus may include a processor and a computer readable medium on which is stored machine readable instructions that may cause the processor to receive a query, in which the query may define an event pertaining to the apparatus to be identified and summarization instructions. The processor may also implement the query on tracked events pertaining to the apparatus to identify event data pertaining to the apparatus that matches the event defined in the query and summarize the identified event data according to the summarization instructions to generate summarized event data responsive to the query. The processor may further output the summarized event data.