Abstract: Disclosed are systems, methods, and non-transitory computer-readable storage media for malware detection and content item recovery. For example, a content management system can receive information describing changes made to content items stored on a user device. The content management system can analyze the information to determine if the described changes are related to malicious software on the user device. When the changes are related to malicious software, the content management system can determine which content items are effected by the malicious software and/or determine when the malicious software first started making changes to the user device. The content management system can recover effected content items associated with the user device by replacing the effected versions of the content items with versions of the content items that existed immediately before the malicious software started making changes to the user device.

Abstract: Nested namespaces for selective content sharing.

Abstract: Disclosed are systems, methods, and non-transitory computer-readable storage media for shared folder backed integrated workspaces. In some implementations, a content management system can provide a graphical user interface (GUI) that integrates communications and content management into a single user interface. The user interface can include mechanisms that allow a user to provide input to generate a new workspace. The user interface can provide a mechanism to allow a user to view conversations related to the workspace and/or content items associated with the workspace. The user interface can present representations of content items associated with the workspace and allow the user to provide input to generate, view, edit, and share content items associated with the workspace.

Abstract: One or more embodiments of a video editing system enable one or more users to conveniently edit a digital video. In particular, an online content management system can provide a low resolution version of a digital video to a client device. A user can interact with the low resolution digital video and generate user edits to apply to the digital video. The online content management system can further apply any number of users edits to low and high resolution versions of the digital video at a server device. The video editing system enables users to more conveniently apply iterative edits to digital videos. Additionally, the video editing system enables multiple users to cooperatively edit a digital video from multiple client devices.

Abstract: The present disclosure relates to systems, methods, and non-transitory computer-readable media that can leverage a natural language model to determine a most probable candidate sequence of tokens and thereby generate a predicted user activity. In particular, the disclosed systems can tokenize activity event vectors to generate a series of sequential tokens that correspond to recent user activity of one or more user accounts. In addition, the disclosed systems can, for each candidate (e.g., hypothetical) user activity, augment the series of sequential tokens to include a corresponding token. Based on respective probability scores for each of the augmented series of sequential tokens, the disclosed systems can identify as the predicted user activity, a candidate user activity corresponding to one of the augmented series of sequential tokens associated with a highest probability score. Based on the predicted user activity, the disclosed systems can surface one or more suggestions to a client device.

Abstract: The present disclosure relates to systems, methods, and non-transitory computer-readable media that utilize machine learning models to generate identifier embeddings from digital content identifiers and then leverage these identifier embeddings to determine digital connections between digital content items. In particular, the disclosed systems can utilize an embedding machine-learning model that comprises a character-level embedding machine-learning model and a word-level embedding machine-learning model. For example, the disclosed systems can combine a character embedding from the character-level embedding machine-learning model and a token embedding from the word-level embedding machine-learning model. The disclosed systems can determine digital connections between the plurality of digital content items by processing these identifier embeddings for a plurality of digital content items utilizing a content management model.

Abstract: A client application of a content management system provides instructions for synchronizing content items and placeholder items using a local file journal and updated file journal. The client application compares entries in the updated file journal to entries in the local file journal to determine modifications to make to content items or placeholder items stored in a shared content storage directory on the client device. Based on the result of the comparison, the client application replaces placeholder items with content items or replaces content items with placeholder items.

Abstract: The present technology addresses the need in the art for an improved technology to display search query results in a space constrained area. The technology pertains to truncating search results in a way that a set of characters used in a search string remains displayed in the search results while other aspects of the search results are truncated.

Abstract: A message can be selectively provided to users of an online content management service based at least in part on a user relationship between the users and a shared content item. Users having the user relationship associated with the message can be shown the message, where users without the user relationship are not shown the message. For example, a message can be configured to be shown upon the first time a content item is opened by a user, but not on subsequent openings of the content item.

Abstract: A collaborative content management system (CMS) is disclosed herein for generating templates for received documents. The disclosed CMS recognizes that a document selected by a user for processing was previously processed by the CMS and that a user has previously added particular overlaid fillable fields to the document. When the determination is made, the system generates a recommendation to create a template of the document with the previously added overlaid fillable fields. In some embodiments, the CMS makes the recommendation to generate a template when the user creates, in a received document, identical overlaid fillable fields or field types to those created in the previously processed document.

Abstract: A collaborative content management system is disclosed herein for receiving a command to add an annotation object following a character input into a line of a collaborative content item. The system inserts an annotation object onto the line following the character, detects a selection of the annotation object, and displays a secondary collaborative content item in visual association with the character. The system detects textual content that corresponds to a citation within the secondary collaborative content item, and responsive to detecting the textual content, generates for display a template for inputting fields of a citation. The system receives text entered into one or more of the fields, generates a citation based on the text, and inputs the citation into the secondary collaborative content item.

Abstract: A first client device associated with a first account of a content management system can receive a first or latest version of a synchronized content item. The first client device can determine differences or the “diff” between the first version and a second or next-to-latest version of the content item and upload the first version and the diff to the content management system. Upon receiving the first version and the diff, the content management system can store the first version and the diff and download them to the second client device. The second client device can generate a notification when the download finishes and present the notification with an interface element for requesting presentation of the diff. When the second client device detects a selection of the interface element, the second client device can present the diff.

Abstract: A secondary device receives presence information for a content item that is synchronized by a content management system with the secondary device and with a primary device. If a user of the primary device is present as indicated by the presence information, a collaboration element is displayed on the secondary device. Responsive to a user input at the collaboration element, a collaboration request is sent to the primary device, and collaboration information enabling collaborative interaction with an instance of the content item on the primary device is received.

Abstract: A non-transitory computer-readable storage media storing program instructions which, when executed by one or more processors, cause the one or more processors to perform: receiving a query to the distributed file system; determining a particular partition, associated with the data warehouse system, targeted by the query; accessing a repository associated with the data warehouse system to determine whether a partition-to-cluster mapping entry for the particular partition targeted by the query exists in the repository; in response to a determination that the entry for the particular partition exists in the repository, obtaining, from the entry for the particular partition, an identifier of a particular cluster to which the particular partition is assigned by the entry for the particular partition, the particular cluster being one of a plurality of clusters of the distributed file system, each cluster of the plurality of clusters having one name node and a plurality of data nodes.

Abstract: Generation of filtering rules for incoming messages can be activated by a user through a gesture-based input. When the user activates filtering rule generation, the message management service can cause a user device to display a prompt requesting additional data to be used to generate the filtering rule. The gesture can be a swipe and hold gesture, where the swipe is associated with an action (archiving, deleting, deferring, or adding the message to a list), and the swipe and hold action can activate filtering rule generation associated with the action.

Abstract: A database structure and a system that uses the structure to facilitate efficient context enrichment of low-level events occurring in a distributed computing system. In one aspect, the database structure comprises a table accessible to a distributed storage system. The table comprises a plurality of rows. Each row represents a corresponding process creation event of a particular process at a particular host at a particular time and assigned a particular event identifier. Each row comprises a row key identifying the particular host, the particular process, the particular time, and the particular event identifier of the process creation event corresponding to the row. The particular time and the particular event identifier are stored as part of the row key in a bitwise one's complement format. The row key structure facilitates efficient identification of a process creation event where only hostname and the process identifier of the process creation event are known.

Abstract: A message management service can enable a client to search and retrieve of messages from one or more messaging services. The message management service can stage delivery of results to the client to reduce response time for identification of messages satisfying a query. Initially, the message management service can send information descriptive of results, which the client can display. The message management service can send subsequent responses including supplemental information associated with a result and/or actual messages.

Abstract: In some embodiments, a system for synchronizing content with client devices receives a request from a client device to synchronize operations pertaining to content items associated with a user account registered at the system. The request can include the operations and a cursor identifying a current position of the client in a journal of revisions on the system. Based on the operations, the system generates linearized operations associated with the content items. The linearized operations can include a respective operation derived for each of the content items from one or more of the operations. The system converts each respective operation in the linearized operations to a respective revision for the journal of revisions and, based on the cursor, determines whether the respective revision conflicts with revisions in the journal. When the respective revision does not conflict with revisions in the journal, the system adds the respective revision to the journal.

Abstract: The disclosed technology addresses the need in the art for synchronizing a content library between a content management system and client devices. Each content item in a user's content library is stored on the content management system and a record of each change to the content library is recorded in a content journal. A client device transmits a synchronization request that a portion of the content journal representing unsynchronized changes be processed to update the content library on the client device. The synchronization request includes a content library identifier and a content journal number identifying the content entry in the content journal last processed by the client device. Synchronization commands are sent based on the content entries not processed by the client device. Updated synchronization data representing the processed content entries is sent to the client device after synchronization is completed.

Abstract: A message management service allows a user to access and manage messages from various message services. The user can access the message management service using a message management client application executing on a client device and can draft messages using the message management client application and send the messages through the different message services. The message management service can add information to messages sent using the message management client application that can be used to identify and organize the messages. A secure sent-message identifier can be added to messages sent by the message management service to reliably indicate that the messages were sent by the message management service.