Abstract: A system and method for applying cybersecurity policies across multiple computing environments is presented.

Abstract: A system and method for generation of unified graph models for network entities are provided. The method includes collecting, for at least one network entity of a plurality of network entities, at least one network entity data feature, wherein the at least one network entity data feature is a network entity property; genericizing the collected at least one network entity; generating at least a network graph, wherein the generated network graph is a multi-dimensional data structure providing a representation of the plurality of network entities and relations between the network entities of the plurality of network entities; and storing the generated at least a network graph.

Abstract: A method and system for providing textual insights on objects deployed in a cloud environment are provided. The method includes collecting object data on objects deployed in the cloud environment, wherein objects are deployed and operable at different layers of the cloud environment; identifying objects deployed in the cloud environment; constructing a visual representation of the cloud environment, including the identified objects and their relationships; and generating textual insights on the identified objects and their relationships using natural language processing.

Abstract: A system and method for technology stack discovery by performing active inspection of a cloud computing environment utilizing disk cloning is described. The method includes: generating an inspectable disk based on an original disk of a reachable resource, wherein the reachable resource is a cloud object deployed in the cloud computing environment, and accessible from a network which is external to the cloud computing environment; detecting a cybersecurity object on the inspectable disk, the cybersecurity object indicating a cybersecurity issue; selecting a network path including a network protocol to access the reachable resource; and actively inspecting the network path to detect the cybersecurity issue.

Abstract: A unified platform may comprise a combination of independent frameworks that have been integrated and configured to collaboratively operate seamlessly. In some aspects, the unified platform may comprise one or more of an authentication and authorization framework, a dynamic user interface framework, a workflow state management framework, a notification and active data loss and prevention (DLP) engine framework, and an orchestration engine framework. Each of the frameworks included in the unified platform may comprise one or more of the plurality of computing devices executing computer-readable program instructions.

Abstract: A method and system for providing textual insights on objects deployed in a cloud environment are provided. The method includes collecting object data on objects deployed in the cloud environment, wherein objects are deployed and operable at different layers of the cloud environment; identifying objects deployed in the cloud environment; constructing a visual representation of the cloud environment, including the identified objects and their relationships; and generating textual insights on the identified objects and their relationships using natural language processing.

Abstract: A system and method for agentless detection of sensitive data in a cloud computing environment is disclosed. The method includes: generating an inspectable disk from a clone of an original disk in a cloud computing environment; inspecting the inspectable disk for a cybersecurity object, the cybersecurity object indicating a sensitive data, the disk deployed in a cloud computing environment; extracting a data schema from the cybersecurity object, in response to detecting the cybersecurity object on the disk; generating a classification of the data schema; detecting in the disk a plurality of data files, each data file including the classified data schema; determining that the data schema corresponds to sensitive data based on the generated classification; generating in a security database: a representation of the data schema, and a representation of each data file; and rendering a visual representation of the cloud computing environment including a representation of the data schema.

Abstract: A system and method for detecting a permission escalation event in a computing environment is disclosed. The method includes: generating a cloned disk based on an original disk of a resource deployed in a computing environment; detecting an identifier of a first principal on the cloned disk; detecting a second principal in the computing environment, the first principal authorized to assume the first principal; storing a representation of the computing environment in a security database, including: a first principal node representing the first principal, and a second principal node representing the second principal, further associated with a permission; querying the representation to determine a permission of the first principal; determining that the second principal includes a permission which the first principal does not include based on a result of querying the representation; and generating a permission escalation event.

Abstract: A system and method for inspecting encrypted disks for a cybersecurity object using a custom key are disclosed. The method includes detecting an encrypted disk in a cloud computing environment, the cloud computing environment including a security policy service; authorizing a key policy on the security policy service for a custom key of an inspector account, wherein the key policy is a policy authorized to decrypt the encrypted disk; generating a second encrypted disk based on the encrypted disk; inspecting the second encrypted disk for a cybersecurity object with the custom key; and releasing a resource allocated to the second encrypted disk in response to completing the inspection.

Abstract: Various embodiments include a heat sink comprising: a base plate with an assembly surface for an electronic component; and a cooling structure bonded to the base plate increasing a surface area of the heat sink. The base plate comprises a metal-ceramic composite with a ceramic phase and a metallic phase. The cooling structure comprises a metal. A bond between the cooling structure and the base plate consists of a purely metallic bond between the cooling structure and the metallic phase of the base plate.

Abstract: A system and method for evaluating definitions from a markup language document for agentless host configuration of an image in a virtualized computing environment generates an instruction to deploy a virtual instance based on a base image, the virtual instance including a disk. The method further includes generating an inspectable disk based on the disk of the virtual instance; receiving a markup language document, the document including a plurality of definitions, each including a data element; inspecting the inspectable disk for a cybersecurity object corresponding to a data element of a first definition of the plurality of definitions; evaluating the first definition based on the cybersecurity object to generate an evaluated first definition result, in response to determining that the definition is evaluable; generating an output based on the evaluated first definition result; and generating the output based on a notification, in response to determining that the definition is unevaluable.

Abstract: A system and method for inspecting encrypted disks for a cybersecurity object using a custom key are disclosed. The method includes detecting an encrypted disk in a cloud computing environment, the cloud computing environment including a security policy service; authorizing a key policy on the security policy service for a custom key of an inspector account, wherein the key policy is a policy authorized to decrypt the encrypted disk; generating a second encrypted disk based on the encrypted disk; inspecting the second encrypted disk for a cybersecurity object with the custom key; and releasing a resource allocated to the second encrypted disk in response to completing the inspection.

Abstract: A system and method for evaluating definitions from a markup language document for agentless host configuration includes generating an inspectable disk based on a disk of a host, the host deployed in a virtualized computing environment. The system is configured to: receive a markup language document, the markup language document including a plurality of definitions, each definition including a data element; inspect the inspectable disk for a cybersecurity object corresponding to a first data element of a first definition of the plurality of definitions; evaluate the first definition further based on the cybersecurity object to generate an evaluated first definition result, in response to determining that the definition is evaluable; generate an output based on the evaluated first definition result; and generate the output based on a predetermined notification, in response to determining that the definition is unevaluable.

Abstract: A system and method for generation of unified graph models for network entities are provided. The method includes collecting, for at least one network entity of a plurality of network entities, at least one network entity data feature, wherein the at least one network entity data feature is a network entity property; genericizing the collected at least one network entity; generating at least a network graph, wherein the generated network graph is a multi-dimensional data structure providing a representation of the plurality of network entities and relations between the network entities of the plurality of network entities; and storing the generated at least a network graph.

Abstract: Various embodiments of the teachings herein include methods for producing an object layer-by-layer using a powder-based 3D printing method by selective fusing of layers of a powder in a powder bed with a selective laser melting process or selective electron beam melting process. At least two successive layers are part of a group. An example method includes, for each group: providing a first layer of the powder; fusing a part of the first layer with first exposure vectors parallel to one another and at a defined spacing; providing a second layer of powder; and fusing a part of the second layer with second exposure vectors arranged at an offset parallel to the first exposure vectors. The exposure vectors of successive groups are rotated by an angle relative to one another.

Abstract: Various embodiments include a method for additive manufacturing of a building structure on using a simulation comprising: accessing a data set for the building structure describing the building structure in layers; calculating a global heat development in previous layers based a building history and heat input by an energy beam; determining a local heat development in a vicinity of the heat input; determining the process control based on the global and the local heat development; loading correction measures from a database; and assigning the correction measures locally to individual vectors of a tool path of the energy beam. At least one mass integral is calculated for individual vectors of the tool path. The measures are determined on the basis of a comparison of the calculated mass integral with mass integrals stored in the database.

Abstract: A computing system may include an access engine and a toolpath reordering engine. The access engine may be configured to access an original layer toolpath for slice of a 3D CAD object as well as a heat criticality measure for the original layer toolpath. The heat criticality measure may specify a heat impact for different points on the multiple toolpath segments of the original layer toolpath for the 3D printing of the physical part using the original layer toolpath. The toolpath reordering engine may be configured to reorder the multiple toolpath segments into a modified layer toolpath, and the modified layer toolpath may have a heat criticality measure with a lesser heat impact on the physical part than the heat criticality measure for the original layer toolpath.

Abstract: Systems, methods, and articles of manufacture for detecting and updating duplicate data records are provided. The system may be configured to detect and retrieve duplicate data records in a data storage and generate a data duplicate reference set comprising the duplicate data records. The duplicate data records may be grouped into common data duplicate groups within the data duplicate reference set. The system may elect one of the duplicate data records from one of the data duplicate groups to be an ACE record. The ACE record may be enriched using the remaining duplicate data records. Data from each duplicate data record may then be overwritten using the ACE record data to ensure that all of the duplicate data records comprise the same data. All of the duplicate data records may be cross-linked in the data storage to ensure consistency and data integrity throughout the data duplicate group.

Abstract: The present disclosure relates to powder-bed-based additive manufacturing processes. Embodiments thereof may include methods for producing a component from a superalloy. For example, a method for producing a component comprising a superalloy may include: preheating a powder bed comprising particles of a core material coated by a ceramic layer, the core material including alloying constituents of the superalloy and building up the component layer by layer in a powder bed by melting particles with an energy beam. The powder bed may be heated to a temperature below a melting point of the core material before the particles are melted.

Abstract: Various embodiments may include a method for the generative manufacturing of a component on a building platform comprising: applying particles of a building material layer by layer to the building platform and then to the component under construction; fusing the applied particles with an energy beam; and heating the component under construction with a heating device associated with the building platform. A reference temperature Tr for each layer produced and a tolerance range for the reference temperature Tr are defined. A heating power of the heating device is lowered as sequential layers are fused to the extent that the tolerance range for a reference temperature Tr is maintained in a last layer produced.