Abstract: Disclosed herein is a computing device and data store for use in the storage and retrieval of communication objects. The computing device can receive a first communication sent using a first communication modality and a second communication sent using a second communication modality. The computing device can determine that the first communication and the second communication correspond to a single interaction. The computing device can generate a communication object with a communications in a particular structure consistent across communication modalities using the first communication and the second communication. The computing device can determine contexts from the communication object and store the communication object in a database with the contexts. The computing device can retrieve the communication object in response to a search request based on the contexts.

Abstract: The disclosed systems and methods relate to searching archived communications. A computing device can receive information associated with documents captured for multiple communication modalities. The computing device can normalize the information associated with each of the documents into a single information structure to generate normalized information. The computing device can generate a transcript of an interaction between participants for the communication modalities based on the normalized information. The computing device can store the transcript of the interaction between the participants in the data archive. The computing device can search the data archive to surface the transcript of the interaction across the communication modalities based on a context corresponding to the single information structure.

Abstract: The disclosed systems and methods relate to archiving communications. Information associated with one or more documents can be received. The documents can be captured from one or more communication modalities. The information can be normalized into a single information structure. A transcript of an interaction between participants can be generated for the communication modalities using the normalized information. The transcript can be stored in an archiving system.

Abstract: A computing device can receive communications sent using one or more communication modalities. The communications can be determined to be a single interaction. A communication object can be generated for the single interaction with a structure being consistent across different communication modalities. A policy can be identified that defines which communication objects to review. The communications can be reviewed along with one or more additional communications similar to the communication object.

Abstract: Provided herein are methods, systems, and computer-program products for providing a supervision system for review of one or more communications associated with an enterprise. The supervision system may be configured to identify the one or more communications from communications associated with the enterprise. A communication may be identified for review according to one or more policies. A policy may indicate criteria that are defined by an enterprise that indicate a communication that should be reviewed. After the communication is identified for review, the communication may be analyzed using one or more filters. A filter may indicate when a communication should not be reviewed, even when the communication is identified for review based on a policy. After a communication is both identified by a policy and not filtered by a filter, the communication may be added to a queue. A queue may be used to organize communications to be reviewed.

Abstract: A unified context-aware content archive system allows enterprises to manage, enforce, monitor, moderate, and review business records associated with a variety of communication modalities. The system may store an information infoset derived or inferred from one or more documents representing communications according to the variety of communication modalities as interaction transcripts. An interaction transcript represents interactions between participants through the documents rather than the documents themselves allowing for derivation or inference of communication events, chronologies, and mappings to be stored in a common data structure. In one aspect, events correlation is provided between participants of communications that can be established by general time series analysis for the purposes of extracting meaningful statistics and interaction contexts and other characteristics of data. In another aspect, chronological mappings are provided of conversations between an established start and end time frame.

Abstract: Provided are methods, systems, and computer-program products for hosting a messaging application remote from a user to facilitate tracking messages sent to or received by a messaging application linked to the hosted messaging application. In some embodiments, hosting the messaging application remote from the user may require that a remote system obtain one or more authentication credentials so that the remote system may authenticate the hosted messaging application with a messaging application system. In such embodiments, the one or more authentication credentials may include data for directly authenticating with the messaging application system (e.g., a username and/or password for an account) or data for indirectly authenticating with the messaging application system (e.g., token, such as a quick response (QR) code), or the like.

Abstract: Provided are methods, systems, and computer-program products for providing a modified library file associated with a messaging application server. The modified library file can implement a messaging application that includes an additional operation of sending messages to a remote server. In some examples, the communications can be text messages that are sent over the Internet or other network. For example, a first device can send one or more text messages to a second device via a messaging application server. The messaging application server can route the one or more text messages to a second device, which can be linked to the first device. The second device can display the one or more text messages. At some point in this process, the one or more text messages can be intercepted and sent to a remote server for storage and analysis.

Abstract: A unified context-aware content archive system allows enterprises to manage, enforce, monitor, moderate, and review business records associated with a variety of communication modalities. The system may store interactions between participants allowing for derivation or inference of communication events, chronologies, and mappings. In one aspect, information retrieval can involve dynamic manipulation of result sets based on hierarchical relationships between stored communication interactions.

Abstract: Provided herein are methods, systems, and computer-program products for providing a supervision system for review of one or more communications associated with an enterprise. The supervision system may be configured to identify the one or more communications from communications associated with the enterprise. A communication may be identified for review according to one or more policies. A policy may indicate criteria that are defined by an enterprise that indicate a communication that should be reviewed. After the communication is identified for review, the communication may be analyzed using one or more filters. A filter may indicate when a communication should not be reviewed, even when the communication is identified for review based on a policy. After a communication is both identified by a policy and not filtered by a filter, the communication may be added to a queue. A queue may be used to organize communications to be reviewed.

Abstract: A unified context-aware content archive system allows enterprises to manage, enforce, monitor, moderate, and review business records associated with a variety of communication modalities. The system may store an information infoset derived or inferred from one or more documents representing communications according to the variety of communication modalities as interaction transcripts. An interaction transcript represents interactions between participants through the documents rather than the documents themselves allowing for derivation or inference of communication events, chronologies, and mappings to be stored in a common data structure. In one aspect, events correlation is provided between participants of communications that can be established by general time series analysis for the purposes of extracting meaningful statistics and interaction contexts and other characteristics of data. In another aspect, chronological mappings are provided of conversations between an established start and end time frame.

Abstract: A unified context-aware content archive system allows enterprises to manage, enforce, monitor, moderate, and review business records associated with a variety of communication modalities. The system may store an information infoset derived or inferred from one or more documents representing communications according to the variety of communication modalities as interaction transcripts. An interaction transcript represents interactions between participants through the documents rather than the documents themselves allowing for derivation or inference of communication events, chronologies, and mappings to be stored in a common data structure. In one aspect, events correlation is provided between participants of communications that can be established by general time series analysis for the purposes of extracting meaningful statistics and interaction contexts and other characteristics of data. In another aspect, chronological mappings are provided of conversations between an established start and end time frame.

Abstract: A unified context-aware content archive system allows enterprises to manage, enforce, monitor, moderate, and review business records associated with a variety of communication modalities. The system may store an information infoset derived or inferred from one or more documents representing communications according to the variety of communication modalities as interaction transcripts. An interaction transcript represents interactions between participants through the documents rather than the documents themselves allowing for derivation or inference of communication events, chronologies, and mappings to be stored in a common data structure. In one aspect, events correlation is provided between participants of communications that can be established by general time series analysis for the purposes of extracting meaningful statistics and interaction contexts and other characteristics of data. In another aspect, chronological mappings are provided of conversations between an established start and end time frame.

Abstract: A unified context-aware content archive system allows enterprises to manage, enforce, monitor, moderate, and review business records associated with a variety of communication modalities. The system may store an information infoset derived or inferred from one or more documents representing communications according to the variety of communication modalities as interaction transcripts. An interaction transcript represents interactions between participants through the documents rather than the documents themselves allowing for derivation or inference of communication events, chronologies, and mappings to be stored in a common data structure. In one aspect, events correlation is provided between participants of communications that can be established by general time series analysis for the purposes of extracting meaningful statistics and interaction contexts and other characteristics of data. In another aspect, chronological mappings are provided of conversations between an established start and end time frame.

Abstract: An application detection architecture and related techniques are provided for detecting, identifying, and managing network-based applications. In various embodiments, a combined layered approach to application detection and various application-detection techniques provide for quick assessments that move from simplest to complex for rapid detection of unauthorized or misbehaving applications in communication with one or more computer networks. This layering, in some embodiments, further provides scalability and speed for determining and implementing policies that may be applicable to detected network-based application, users, groups, or devices associated with unauthorized network-based applications sending or receiving data via a computer network.

Abstract: In various embodiments, a data-driven model is provided for an application detection engine for the detection and identification of network-based applications. In one embodiment, information can be input into an application detection database. The information may include a hostname, ports, transport protocol (TCP/UDP), higher layer protocol (SOCKS, HTTP, SMTP, FTP, etc), or the like. The information may be associated with a given application. The information may be used to create rule sets or custom program logic used by one or more various application detection engines for determining whether network traffic has been initiated by a given application. The information may be dynamically loaded and updated at the application detection engine.

Abstract: In various embodiments, techniques can be provided for identifying and filtering network resources. The filtering may occur not only on the type of network traffic (e.g., HTTP traffic) but also with resources identified by the network traffic. In some embodiments, one or more hash functions may be used to facilitate the identification, searching, and matching of network resources. The network resources may be identified as a unique domain, unique network host, unique URL, or the like.

Abstract: Security components of managed computers are configured using inoculation data. Inoculation data can be retrieved from an inoculation data provider. The inoculation data provider analyzes unauthorized software applications to develop inoculation data. The inoculation data configures the security component to deny access to resources to unauthorized software applications. Inoculation data can be embedded into a script, which is distributed via a management protocol to one or more managed computers from a management computer. Resources can include files, storage paths, memory, registry keys, processor priority, services, dynamic link libraries, archives, browser cookies, and/or ActiveX controls, Java applets, or classes thereof.

Abstract: In various embodiments, techniques are provided for creating visualizations of network traffic. Such disclosed techniques may be incorporated by or implemented by one or more computing devices, computer systems, embedded systems, application-specific circuitry, or the like, that generate visualizations of network traffic. Network traffic information may be obtained in response to monitoring network traffic associated with a communications network. The network traffic information may include a variety of detailed or summary analysis of network traffic. In general, network traffic may summarized according to applications associated with network traffic. Hierarchies developed based on relationships between application categories, the applications themselves, and users or groups associated with the applications may be used to develop one or more of a variety of visual representations of the network traffic information.

Abstract: Techniques for managing instant message (IM) communications are provided. In various embodiments, IM communications in a plurality of network implementations are managed using one or more policies. A policy in the one or more policies includes an action applicable for an IM communication. Once an IM communications is received from an IM client, a policy that is applicable for that IM communication is determined. After determining an applicable policy, an action associated with the policy for the instant message communication is performed. Examples of actions that may be taken include recording the IM communication, modifying the IM communication, blocking the IM communication, forwarding the IM communication, and the like.