Abstract: A computer-implemented method for enabled intervention into a network computing environment. The method may include: obtaining, via the monitoring, data relating to an action performed in the network computing environment; matching the data to a first enabled action program profile of a plurality of enabled action program profiles, the first enabled action program profile prescribing an enabled action program; and performing one or both of the following: (i) executing the enabled action program to cause a pre-determined change in the network computing environment; and (ii) attaching the enabled action program to a natural language narrative describing the action.

Abstract: A computer-implemented method for targeted narrative-structure representation of a network computing environment. The method may include: monitoring the network computing environment; obtaining, via the monitoring, data relating to an action performed in the network computing environment; selecting a first preference set from a plurality of preference sets, each of the preference sets corresponding to a respective one of a plurality of user roles and including a first structural narrative definition configured for the corresponding one of the user roles; generating a first natural language narrative describing the action based on the selected first preference set; and exposing or providing a representation of the first natural language narrative to an individual user assigned to a first user role of the user roles corresponding to the first preference set.

Abstract: A computer-implemented method for feedback-driven narrative-structure representation of a network computing environment. The method may include: monitoring the network computing environment; obtaining, via the monitoring, data relating to an action performed in the network computing environment; generating an initial natural language narrative describing the action; exposing or providing a representation of the initial natural language narrative to an individual user; receiving input from the individual user in response to the initial natural language narrative; based at least in part on the input, generating a revised natural language narrative relating to the action; and exposing or providing a representation of the revised natural language narrative to the individual user.

Abstract: A computer-implemented method for narrative-structured representation of and intervention into a network computing environment. The method may include: attaching an enabled action program to an abstracted natural language narrative, where execution of the enabled action program causes pre-determined changes in the behavior and/or capabilities of an entity within the network computing environment; generating a representation of the abstracted natural language narrative that includes an enabled action link and an abstraction-toggle link for retrieval of a representation of an unabstracted natural language narrative; upon activation of the abstraction-toggle link, retrieving the representation of the unabstracted natural language narrative; and upon activation of the enabled action link, automatically implementing the pre-determined changes within the network computing environment.

Abstract: A computer-implemented method for narrative-structured representation of and intervention into a network computing environment. The method may include: attaching an enabled action program to an abstracted natural language narrative, where execution of the enabled action program causes pre-determined changes in the behavior and/or capabilities of an entity within the network computing environment; generating a representation of the abstracted natural language narrative that includes an enabled action link and an abstraction-toggle link for retrieval of a representation of an unabstracted natural language narrative; upon activation of the abstraction-toggle link, retrieving the representation of the unabstracted natural language narrative; and upon activation of the enabled action link, automatically implementing the pre-determined changes within the network computing environment.

Abstract: A computer-implemented method for narrative-structured representation of and intervention into a network computing environment. The method may include: attaching an enabled action program to an abstracted natural language narrative, where execution of the enabled action program causes pre-determined changes in the behavior and/or capabilities of an entity within the network computing environment; generating a representation of the abstracted natural language narrative that includes an enabled action link and an abstraction-toggle link for retrieval of a representation of an unabstracted natural language narrative; upon activation of the abstraction-toggle link, retrieving the representation of the unabstracted natural language narrative; and upon activation of the enabled action link, automatically implementing the pre-determined changes within the network computing environment.

Abstract: A computer-implemented method for expanded entity and activity mapping within a network computing environment. The method may include: retrieving records relating to an activity within the environment; identifying an orphan record among the records that does not match, and a plurality of pre-matched records among the records that do match, one or more pre-defined node and edge profiles; building test graph database models respectively corresponding to alternative test profiles for modeling the orphan record; and building a production graph database model based at least in part on the test profile corresponding to the test graph database model exhibiting the best identity tracing characteristics among all the test graph database models.

Abstract: A computer-implemented method for expanded entity and activity mapping within a network computing environment. The method may include: retrieving records relating to an activity within the environment; identifying an orphan record among the records that does not match, and a plurality of pre-matched records among the records that do match, one or more pre-defined node and edge profiles; building test graph database models respectively corresponding to alternative test profiles for modeling the orphan record; and building a production graph database model based at least in part on the test profile corresponding to the test graph database model exhibiting the best identity tracing characteristics among all the test graph database models.

Abstract: A computer-implemented method for autonomous cybersecurity. The method may include: receiving data elements relating to resources and/or activity within a network computing environment; feeding at least some of the elements to an optimizer program to calculate a first distance to a system goal; based on the first distance, implementing pre-determined changes in the environment; receiving post-implementation data records relating to resources and/or activity within the environment; calculating a second distance to the system goal by feeding the post-implementation data records to the optimizer program; and configuring the optimizer program for additional advancement toward the system goal based on comparison of the first and second distances.

Abstract: A computer-implemented method for activity verification within a network computing environment. The method may include: retrieving a verification requirement defining an activity within the network computing environment, a candidate verifier, and contact information for the candidate verifier; transmitting a request for participation to the candidate verifier; upon confirmation, enrolling the confirmed verifier to the verification requirement; receiving a post-enrollment data record relating to an observed activity within the network computing environment; matching the observed activity to the verification requirement; transmitting a verification request to the enrolled confirmed verifier; receiving a verification response from the enrolled confirmed verifier; based on the verification response, generating a command to restrict or permit the observed activity within the network computing environment.

Abstract: A computer-implemented method for narrative-structured representation of and intervention into a network computing environment. The method may include: attaching an enabled action program to an abstracted natural language narrative, where execution of the enabled action program causes pre-determined changes in the behavior and/or capabilities of an entity within the network computing environment; generating a representation of the abstracted natural language narrative that includes an enabled action link and an abstraction-toggle link for retrieval of a representation of an unabstracted natural language narrative; upon activation of the abstraction-toggle link, retrieving the representation of the unabstracted natural language narrative; and upon activation of the enabled action link, automatically implementing the pre-determined changes within the network computing environment.

Abstract: A computer-implemented method for resource preservation and intervention. The method may include: enumerating a plurality of resources within a network computing environment based on data elements relating to activities and/or resources in the environment; classifying the resources under one of a plurality of pre-defined categories; based on the classification, assigning a plurality of enabled action programs to each of the resources, wherein execution of the enabled action programs causes pre-determined changes in the behavior and/or capabilities of the corresponding one of the resources; based on the classification of the resources, applying one of a plurality of data preservation programs to resources within the environment, wherein execution of the data preservation programs causes collection of corresponding pre-defined resource data; and, for each of the resources, exposing the corresponding pre-defined resource data and the assigned enabled action programs to and for use via a client device.