Systems, methods, and apparatus, including computer pro grams encoded on computer
storage media, for obtaining, processing, and presenting data related to security events, and …

US11146578B2 - Method and system for employing graph analysis for detecting malicious
activity in time evolving networks - Google Patents US11146578B2 - Method and system for …

(57) ABSTRACT A system configured to detect a threat activity on a network. The system
including a digital device configured to detect a first order indicator of compromise on a …

(57) ABSTRACT A graph of a plurality of resources in a computing environ ment is
generated, with the graph associating a first resource of the plurality with a second resource …

In general, one innovative aspect of the Subject matter described in this specification can be
embodied in methods for transforming representations of network activity data, including …

(57) ABSTRACT A system acquires diagnostic information from event logs, trace files, and
other diagnostic sources to reduce a set of event records. The event records are arranged in …

OTHER PUBLICATIONS Australian Office Action in Application No. 2016202191, dated Jul.
8, 2016, 5 pages. Mehta, V. et al.“Ranking attack graphs,” International Workshop on Recent …

Implementations are directed to methods for detecting and identifying advanced persistent
threats (APTs) in networks, including receiving first domain activity data from a first network …

(57) ABSTRACT A lateral movement application identifies lateral movement (LM) candidates
that potentially represent a security threat. Security platforms generate event data when …

(74) Attorney, Agent, or Firm-Rutan & Tucker, LLP (57) ABSTRACT Computerized
techniques to determine and verify malicious ness of an object are described. A malware …