Abstract: A method for policy-based analytics includes retrieving, from a graph database, first data representing a first entity in a computing environment, a second entity in the computing environment, and an event associated with the first entity and the second entity; predicting, according to a risk indicator model, a risk associated with the first entity based at least in part on the event; and updating the graph database to include second data representing the risk and a risk indicator. The first and second entities are stored as properties of a first vertex and a second vertex, respectively, and the event is stored as a property of an edge between the first vertex and the second vertex. The risk indicator is stored as a property of a third vertex. The risk is stored as a property of an edge between the first vertex and the third vertex.

Abstract: A method is provided for converting a single database query into multiple database queries for multiple databases and aggregating the results of each of the queries. The method includes receiving, from a calling device, an input database query including a selection set defining an aggregation key, at least one first field to be queried in a first database, and at least one second field to be queried in a second database, generating a first database query representing a first request to retrieve the at least one first field from the first database, generating a second database query representing a second request to retrieve the at least one second field from the second database, aggregating the first response and a second response to the second database query from the first database to produce an aggregated response, and providing the aggregated response to the calling device.

Abstract: A method is provided for converting a single database query into multiple database queries for multiple databases and aggregating the results of each of the queries. The method includes receiving, from a calling device, an input database query including a selection set defining an aggregation key, at least one first field to be queried in a first database, and at least one second field to be queried in a second database, generating a first database query representing a first request to retrieve the at least one first field from the first database, generating a second database query representing a second request to retrieve the at least one second field from the second database, aggregating the first response and a second response to the second database query from the first database to produce an aggregated response, and providing the aggregated response to the calling device.

Abstract: A method for translating a generic database query to a graph database query includes receiving a first database query including one or more selection sets each defining at least one database field to be queried from a graph database, where the first database query is coded in a generic query language and the at least one database field is represented in the graph database as a property of a vertex. For each of the selection sets, a second database query including a select clause representing a request to retrieve the property of the vertex from the graph database is generated, where the second database query is coded in a graph query language. The second database query is encapsulated into a third database query configured to be executed on the graph database, the third database query including the second database query, a query type, and a graph name.

Abstract: A method for policy-based analytics includes retrieving, from a graph database, first data representing a first entity in a computing environment, a second entity in the computing environment, and an event associated with the first entity and the second entity; predicting, according to a risk indicator model, a risk associated with the first entity based at least in part on the event; and updating the graph database to include second data representing the risk and a risk indicator. The first and second entities are stored as properties of a first vertex and a second vertex, respectively, and the event is stored as a property of an edge between the first vertex and the second vertex. The risk indicator is stored as a property of a third vertex. The risk is stored as a property of an edge between the first vertex and the third vertex.

Abstract: Described embodiments provide systems and methods for executing one or more operations on a data source using an application programming interface (“API”) query language operations. The system can include a server that can receive a request specifying an API query language operation to execute on a data source having a structured query language (“SQL”) API. The server can identify a schema file for operating the API query language on the data source. The server can translate the API query language operation into an SQL operation using the API query language schema file configured for the data source. The server can transmit the SQL operation to the data source. The server can receive an SQL response to the SQL operation from the data source. The server can generate an API query language response based on the SQL response from the data source in response to the request from the client device.