Patents Assigned to Expel, Inc.
  • Publication number: 20240121096
    Abstract: A system and method for using digitally signed web tokens to securely share sensitive data includes identifying an API request that includes an authorization header comprising authentication data; assessing the authentication data of the API request against a corpus of valid authentication data; identifying the authentication data as valid authentication data and a target entity that corresponds to the authentication data; obtaining a set of permissions associated with the target entity; generating a digitally signed protobuf web token that includes a representation of the target entity and a representation of the set of permissions associated with the target entity; and based on the generation of the digitally signed protobuf web token: adapting the API request to an adapted API request that includes a header component comprising the digitally signed protobuf web token; and transmitting the adapted API request to a target API-processing service.
    Type: Application
    Filed: December 19, 2023
    Publication date: April 11, 2024
    Applicant: Expel, Inc.
    Inventor: Matthew Blasius
  • Patent number: 11949708
    Abstract: A system and method for accelerating a threat mitigation of malicious cybersecurity activity includes: identifying, via one or more processors, a cybersecurity event associated with a third-party application or a third-party service of a subscriber; generating, via the one or more processors, a service-proposed remediation action for the cybersecurity event based on the identifying of the cybersecurity event; automatically assessing, via the one or more processors, the service-proposed remediation action against automated remediation criteria of the subscriber based on the generation of the service-proposed remediation action; automatically constructing, via the one or more processors, a remediation action application programming interface (API) request for the service-proposed remediation action based on the service-proposed remediation action satisfying the automated remediation criteria of the subscriber; and automatically executing, via the one or more processors, the remediation action API request to rem
    Type: Grant
    Filed: October 4, 2023
    Date of Patent: April 2, 2024
    Assignee: Expel, Inc.
    Inventor: Nabeel Zafar
  • Patent number: 11936672
    Abstract: A system and method for adapting one or more cybersecurity microservices to accelerate cybersecurity threat mitigation includes constructing a subscriber-specific data corpus comprising a plurality of distinct pieces of computing environment-informative data of a target subscriber; adapting a subscriber-agnostic microservice of the cybersecurity service to a subscriber-specific microservice, wherein: the subscriber-agnostic microservice includes a plurality of subscriber-agnostic cybersecurity event handling instructions, and adapting the subscriber-agnostic microservice to the subscriber-specific microservice includes generating a plurality of context-informed cybersecurity event handling instructions; augmenting the subscriber-agnostic microservice to include the plurality of context-informed cybersecurity event handling instructions; computing for a target cybersecurity event a subscriber-specific threat severity level based on one or more of the plurality of context-informed cybersecurity event handling i
    Type: Grant
    Filed: September 19, 2023
    Date of Patent: March 19, 2024
    Assignee: Expel, Inc.
    Inventors: Patrick Duffy, Kelsey Mitchell, Peter Silberman
  • Publication number: 20240056303
    Abstract: A system and method for using digitally signed web tokens to securely share sensitive data includes identifying an API request that includes an authorization header comprising authentication data; assessing the authentication data of the API request against a corpus of valid authentication data; identifying the authentication data as valid authentication data and a target entity that corresponds to the authentication data; obtaining a set of permissions associated with the target entity; generating a digitally signed protobuf web token that includes a representation of the target entity and a representation of the set of permissions associated with the target entity; and based on the generation of the digitally signed protobuf web token: adapting the API request to an adapted API request that includes a header component comprising the digitally signed protobuf web token; and transmitting the adapted API request to a target API-processing service.
    Type: Application
    Filed: July 26, 2023
    Publication date: February 15, 2024
    Applicant: Expel, Inc.
    Inventor: Matthew Blasius
  • Patent number: 11895238
    Abstract: A system and method for using digitally signed web tokens to securely share sensitive data includes identifying an API request that includes an authorization header comprising authentication data; assessing the authentication data of the API request against a corpus of valid authentication data; identifying the authentication data as valid authentication data and a target entity that corresponds to the authentication data; obtaining a set of permissions associated with the target entity; generating a digitally signed protobuf web token that includes a representation of the target entity and a representation of the set of permissions associated with the target entity; and based on the generation of the digitally signed protobuf web token: adapting the API request to an adapted API request that includes a header component comprising the digitally signed protobuf web token; and transmitting the adapted API request to a target API-processing service.
    Type: Grant
    Filed: July 26, 2023
    Date of Patent: February 6, 2024
    Assignee: Expel, Inc.
    Inventor: Matthew Blasius
  • Patent number: 11886580
    Abstract: A system and method for generating a digital cybersecurity artifact includes selectively executing an automated cybersecurity investigation workflow based on a probable cybersecurity threat type of a cybersecurity event, wherein an output of the automated cybersecurity investigation workflow includes one or more corpora of investigation findings data in response to executing the automated cybersecurity investigation workflow; selectively instantiating a digital cybersecurity artifact of a plurality of digital cybersecurity artifacts based on the probable cybersecurity threat type of the cybersecurity event, wherein the digital cybersecurity artifact includes a plurality of distinct regions electronically mapped to one or more threat type-specific content automations that, when executed, install investigation findings data into the plurality of distinct regions of the plurality of distinct regions of the digital cybersecurity artifact with selective subsets of investigation findings data of the one or more cor
    Type: Grant
    Filed: February 10, 2023
    Date of Patent: January 30, 2024
    Assignee: Expel, Inc.
    Inventors: Jonathan Hencinski, Emily Garton, Jasper Tom, Pat Conley, David Spigarelli, Roger Studner
  • Publication number: 20240028714
    Abstract: A system and method for automated verification of a cybersecurity event includes identifying a cybersecurity event of a subscriber; automatically constructing a response-enabled verification communication based on one or more features of the cybersecurity event satisfying verification-initiating criteria of an automated verification-initiation workflow, and transmitting the response-enabled verification communication to the subscriber associated with the cybersecurity event, wherein the response-enabled verification communication includes: one or more pieces of event-descriptive content; a first selectable interface object that, when selected by the subscriber, automatically increases a threat severity level of the cybersecurity event; and a second selectable interface object that, when selected by the subscriber, automatically de-escalates the threat severity level of the cybersecurity event causing a disposal of the cybersecurity event; and automatically routing the cybersecurity event to one of a cybersecu
    Type: Application
    Filed: October 4, 2023
    Publication date: January 25, 2024
    Applicant: Expel, Inc.
    Inventors: Peter Silberman, Jonathan Hencinski, Dan Whalen, Roger Studner
  • Publication number: 20240031398
    Abstract: A system and method for accelerating a threat mitigation of malicious cybersecurity activity includes: identifying, via one or more processors, a cybersecurity event associated with a third-party application or a third-party service of a subscriber; generating, via the one or more processors, a service-proposed remediation action for the cybersecurity event based on the identifying of the cybersecurity event; automatically assessing, via the one or more processors, the service-proposed remediation action against automated remediation criteria of the subscriber based on the generation of the service-proposed remediation action; automatically constructing, via the one or more processors, a remediation action application programming interface (API) request for the service-proposed remediation action based on the service-proposed remediation action satisfying the automated remediation criteria of the subscriber; and automatically executing, via the one or more processors, the remediation action API request to rem
    Type: Application
    Filed: October 4, 2023
    Publication date: January 25, 2024
    Applicant: Expel, Inc.
    Inventor: Nabeel Zafar
  • Patent number: 11809554
    Abstract: A system and method for automated verification of a cybersecurity event includes identifying a cybersecurity event of a subscriber; automatically constructing a response-enabled verification communication based on one or more features of the cybersecurity event satisfying verification-initiating criteria of an automated verification-initiation workflow, and transmitting the response-enabled verification communication to the subscriber associated with the cybersecurity event, wherein the response-enabled verification communication includes: one or more pieces of event-descriptive content; a first selectable interface object that, when selected by the subscriber, automatically increases a threat severity level of the cybersecurity event; and a second selectable interface object that, when selected by the subscriber, automatically de-escalates the threat severity level of the cybersecurity event causing a disposal of the cybersecurity event; and automatically routing the cybersecurity event to one of a cybersecu
    Type: Grant
    Filed: December 2, 2022
    Date of Patent: November 7, 2023
    Assignee: Expel, Inc.
    Inventors: Peter Silberman, Jonathan Hencinski, Dan Whalen, Roger Studner
  • Patent number: 11811819
    Abstract: A system and method for accelerating a threat mitigation of malicious cybersecurity activity includes: identifying, via one or more processors, a cybersecurity event associated with a third-party application or a third-party service of a subscriber; generating, via the one or more processors, a service-proposed remediation action for the cybersecurity event based on the identifying of the cybersecurity event; automatically assessing, via the one or more processors, the service-proposed remediation action against automated remediation criteria of the subscriber based on the generation of the service-proposed remediation action; automatically constructing, via the one or more processors, a remediation action application programming interface (API) request for the service-proposed remediation action based on the service-proposed remediation action satisfying the automated remediation criteria of the subscriber; and automatically executing, via the one or more processors, the remediation action API request to rem
    Type: Grant
    Filed: March 17, 2023
    Date of Patent: November 7, 2023
    Assignee: Expel, Inc.
    Inventor: Nabeel Zafar
  • Patent number: 11799887
    Abstract: A system and method for adapting one or more cybersecurity microservices to accelerate cybersecurity threat mitigation includes constructing a subscriber-specific data corpus comprising a plurality of distinct pieces of computing environment-informative data of a target subscriber; adapting a subscriber-agnostic microservice of the cybersecurity service to a subscriber-specific microservice, wherein: the subscriber-agnostic microservice includes a plurality of subscriber-agnostic cybersecurity event handling instructions, and adapting the subscriber-agnostic microservice to the subscriber-specific microservice includes generating a plurality of context-informed cybersecurity event handling instructions; augmenting the subscriber-agnostic microservice to include the plurality of context-informed cybersecurity event handling instructions; computing for a target cybersecurity event a subscriber-specific threat severity level based on one or more of the plurality of context-informed cybersecurity event handling i
    Type: Grant
    Filed: January 11, 2023
    Date of Patent: October 24, 2023
    Assignee: Expel, Inc.
    Inventors: Patrick Duffy, Kelsey Mitchell, Peter Silberman
  • Publication number: 20230289438
    Abstract: A system and method for generating event-specific handling instructions for accelerating a threat mitigation of a cybersecurity event includes identifying a cybersecurity event; generating a cybersecurity event digest based on the cybersecurity event, computing a cybersecurity hashing-based signature of the cybersecurity event based on the cybersecurity event digest; searching, based on the distinct cybersecurity hashing-based signature of the cybersecurity event, an n-dimensional space comprising a plurality of historical cybersecurity event hashing-based signatures; returning one or more historical cybersecurity events or historical cybersecurity alerts homogeneous to the cybersecurity event based on the search; deriving one or more cybersecurity event-specific handling actions for the cybersecurity event based on identifying a threat handling action corresponding to each of the one or more historical cybersecurity events or historical cybersecurity alerts homogeneous to the cybersecurity event; and executi
    Type: Application
    Filed: May 15, 2023
    Publication date: September 14, 2023
    Applicant: Expel, Inc.
    Inventors: Peter Silberman, Dan Whalen, Matt Berninger, Paul Diebold, Ben Kawecki
  • Publication number: 20230247046
    Abstract: A cybersecurity system and method for handling a cybersecurity event includes identifying a cybersecurity alert; selectively initializing automated threat intelligence workflows based on computing a cybersecurity alert type, wherein the automated threat intelligence workflows include a plurality of automated investigative tasks that, when executed by one or more computers, derive cybersecurity alert intelligence data; and executing the plurality of automated investigative tasks includes automatically sourcing a corpus of investigative data; deriving the cybersecurity alert intelligence data based on extracting selective pieces of data from the corpus of investigative data, wherein the cybersecurity alert intelligence data informs an inference of a cybersecurity alert severity of the cybersecurity alert; and automatically routing the cybersecurity alert to one of a plurality of distinct threat mitigation or threat disposal routes based on the cybersecurity alert severity of the cybersecurity alert.
    Type: Application
    Filed: April 11, 2023
    Publication date: August 3, 2023
    Applicant: Expel, Inc.
    Inventors: Matt Peters, Peter Silberman, Dan Whalen, Elisabeth Weber, Jon Hencinski, John Begeman
  • Patent number: 11693959
    Abstract: A system and method for generating event-specific handling instructions for accelerating a threat mitigation of a cybersecurity event includes identifying a cybersecurity event; generating a cybersecurity event digest based on the cybersecurity event, computing a cybersecurity hashing-based signature of the cybersecurity event based on the cybersecurity event digest; searching, based on the distinct cybersecurity hashing-based signature of the cybersecurity event, an n-dimensional space comprising a plurality of historical cybersecurity event hashing-based signatures; returning one or more historical cybersecurity events or historical cybersecurity alerts homogeneous to the cybersecurity event based on the search; deriving one or more cybersecurity event-specific handling actions for the cybersecurity event based on identifying a threat handling action corresponding to each of the one or more historical cybersecurity events or historical cybersecurity alerts homogeneous to the cybersecurity event; and executi
    Type: Grant
    Filed: November 23, 2022
    Date of Patent: July 4, 2023
    Assignee: Expel, Inc.
    Inventors: Peter Silberman, Dan Whalen, Matt Berninger, Paul Diebold, Ben Kawecki
  • Patent number: 11658999
    Abstract: A cybersecurity system and method for handling a cybersecurity event includes identifying a cybersecurity alert; selectively initializing automated threat intelligence workflows based on computing a cybersecurity alert type, wherein the automated threat intelligence workflows include a plurality of automated investigative tasks that, when executed by one or more computers, derive cybersecurity alert intelligence data; and executing the plurality of automated investigative tasks includes automatically sourcing a corpus of investigative data; deriving the cybersecurity alert intelligence data based on extracting selective pieces of data from the corpus of investigative data, wherein the cybersecurity alert intelligence data informs an inference of a cybersecurity alert severity of the cybersecurity alert; and automatically routing the cybersecurity alert to one of a plurality of distinct threat mitigation or threat disposal routes based on the cybersecurity alert severity of the cybersecurity alert.
    Type: Grant
    Filed: February 15, 2022
    Date of Patent: May 23, 2023
    Assignee: Expel, Inc.
    Inventors: Matt Peters, Peter Silberman, Dan Whalen, Elisabeth Weber, Jon Hencinski, John Begeman
  • Patent number: 11604875
    Abstract: A system and method for generating a digital cybersecurity artifact includes selectively executing an automated cybersecurity investigation workflow based on a probable cybersecurity threat type of a cybersecurity event, wherein an output of the automated cybersecurity investigation workflow includes one or more corpora of investigation findings data in response to executing the automated cybersecurity investigation workflow; selectively instantiating a digital cybersecurity artifact of a plurality of digital cybersecurity artifacts based on the probable cybersecurity threat type of the cybersecurity event, wherein the digital cybersecurity artifact includes a plurality of distinct regions electronically mapped to one or more threat type-specific content automations that, when executed, install investigation findings data into the plurality of distinct regions of the plurality of distinct regions of the digital cybersecurity artifact with selective subsets of investigation findings data of the one or more cor
    Type: Grant
    Filed: July 7, 2022
    Date of Patent: March 14, 2023
    Assignee: Expel, Inc.
    Inventors: Jonathan Hencinski, Emily Garton, Jasper Tom, Pat Conley, David Spigarelli, Roger Studner
  • Patent number: 11556638
    Abstract: A system and method for generating event-specific handling instructions for accelerating a threat mitigation of a cybersecurity event includes identifying a cybersecurity event; generating a cybersecurity event digest based on the cybersecurity event, computing a cybersecurity hashing-based signature of the cybersecurity event based on the cybersecurity event digest; searching, based on the distinct cybersecurity hashing-based signature of the cybersecurity event, an n-dimensional space comprising a plurality of historical cybersecurity event hashing-based signatures; returning one or more historical cybersecurity events or historical cybersecurity alerts homogeneous to the cybersecurity event based on the search; deriving one or more cybersecurity event-specific handling actions for the cybersecurity event based on identifying a threat handling action corresponding to each of the one or more historical cybersecurity events or historical cybersecurity alerts homogeneous to the cybersecurity event; and executi
    Type: Grant
    Filed: June 27, 2022
    Date of Patent: January 17, 2023
    Assignee: Expel, Inc.
    Inventors: Peter Silberman, Dan Whalen, Matt Berninger, Paul Diebold, Ben Kawecki
  • Patent number: D1024122
    Type: Grant
    Filed: May 26, 2022
    Date of Patent: April 23, 2024
    Assignee: Expel, Inc.
    Inventors: Jasper Tom, Emily Garton
  • Patent number: D1026019
    Type: Grant
    Filed: May 26, 2022
    Date of Patent: May 7, 2024
    Assignee: Expel, Inc.
    Inventor: Kim Bieler
  • Patent number: D1026032
    Type: Grant
    Filed: May 26, 2022
    Date of Patent: May 7, 2024
    Assignee: Expel, Inc.
    Inventors: Kelsey Mitchell, Emily Garton