Abstract: The presently disclosed subject matter includes a device, system and method for monitoring activity at a computerized device, the device running one or more processes, at least one of the processes executing one or more system events being part of an activity. An activity of interest can be identified if system events related to the activity of interest are identified. An activity is monitored at the device using API queries to obtain descriptive information of the at least one respective system event executed as part of the activity. Using non-intrusive monitoring methods which are based on API queries enables to reduce the potential of interference of the monitoring with applications running on the monitored device.

Abstract: The presently disclosed subject matter includes a device, system and method for monitoring activity at a computerized device, the device running one or more processes, at least one of the processes executing one or more system events being part of an activity. An activity of interest can be identified if system events related to the activity of interest are identified. An activity is monitored at the device using API queries to obtain descriptive information of the at least one respective system event executed as part of the activity. Using non-intrusive monitoring methods which are based on API queries enables to reduce the potential of interference of the monitoring with applications running on the monitored device.

Abstract: The presently disclosed subject matter includes a system and method which enable to identify one or more causes for excessive energy consumption in a computer executing one or more processes. Information indicating that consumption of a computer-resource of at least one of said processes is greater than a predefined threshold is obtained and one or more threads of said at least one process which are in running state are identified. Thread performance information of at least one thread in running state is collected and used for identifying one or more functions that are the cause for said state of the respective thread. The identified functions are associated with their respective modules in order to identify one or more modules of said process, which are the cause for said excessive energy consumption.

Abstract: The presently disclosed subject matter includes a system and method which enable to identify one or more causes for excessive energy consumption in a computer executing one or more processes. Information indicating that consumption of a computer-resource of at least one of said processes is greater than a predefined threshold is obtained and one or more threads of said at least one process which are in running state are identified. Thread performance information of at least one thread in running state is collected and used for identifying one or more functions that are the cause for said state of the respective thread. The identified functions are associated with their respective modules in order to identify one or more modules of said process, which are the cause for said excessive energy consumption.

Abstract: A System is monitored by detecting activity signatures of network components. Some of the activity signatures are generated by sensing patterns of operations in data streams. Some of the activity signatures are precompiled in the system, or are standard in computer systems. The activity signatures are stored in a database. Select information about select baselined attributes generates monitoring profiles (MPs) for the baselined attributes. The MPs are defined so abnormal behavior of end points and/or system components can be detected. The system compiles baseline values for baselined attributes of MP's. By properly analyzing deviating end points or components one can determine what is causing a problem or who is effected by a problem based on which identifying attributes are common to the deviating end points or components.

Abstract: A system is disclosed for identifying one or more causes of a computer executing one or more processes running slowly, the system includes: apparatus for detecting states of one or more threads of the one or more processes; apparatus for identifying one or more of said one or more processes that have one or more threads with wait states that occur above a threshold to indicate which modules within a process or processes is causing said computer to run slowly. In one embodiment the system as the apparatus for detecting states periodically polls the one or more threads of the processes. The system can also include a data structure to store the states of each of said one or more threads each time said thread is polled. The system can be one in which one or more threads are UI threads.

Abstract: A first embodiment of the system and method of this invention is disclosed in a distributed computer system. The system is monitored by detecting activity signatures of individually identifiable network components, programs and/or PCs by sensing operations (keystrokes on a keyboard or mouse clicks) and/or codes embedded in data streams in the system. The activity signatures can be defined by result-specific character sets and are generated or provided for identifying the various activities of the system. After the activity signatures are generated, select information about select baselined attributes of activities detected by their activity signatures are measured and compiled in a database, and monitoring profiles (MPs) for the baselined attributes of activities are generated. The MPs are defined by a group of identifying attribute values of end-points so abnormal behavior of end-points/components can later be detected. For example, a disconnected server associated with a group of terminals can be detected.