Abstract: A computer system identifies malicious Uniform Resource Locator (URL) data items from a plurality of unscreened data items that have not been previously identified as associated with malicious URLs. The system can execute a number of pre-filters to identify a subset of URLs in the plurality of data items that are likely to be malicious. A scoring processor can score the subset of URLs based on a plurality of input vectors using a suitable machine learning model. Optionally, the system can execute one or more post-filters on the score data to identify data items of interest. Such data items can be fed back into the system to improve machine learning or can be used to provide a notification that a particular resource within a local network is infected with malicious software.

Abstract: A computer-implemented software system and method allows data-processing entities to visualize data as pseudo-three-dimensional objects dynamically and interact with and/or manipulate the objects.

Abstract: Systems and methods are provided for searching a schema to identify and visualize corresponding data. The system may be configured to receive a search query and search the schema for columns that correspond to one another. Individual ones of the corresponding columns may have different labels or different data types. Results for the search query may be determined. The results may include a first set of columns that satisfy the search query including a first column and a second column that correspond to each other but have one or more different labels or different data types. The system may be configured to generate a graphical representation of a data distribution for the first column responsive to receiving a selection of the first column.

Abstract: Systems and methods are provided for determining multiple fragments of data to be imported, the multiple fragments of data corresponding to different instances of data obtained from one or more external data sources, the different instances of data each corresponding to duplicate content. The multiple fragments of data that each correspond to different instances of duplicate content can be ingested. The multiple fragments of data can be de-duplicated to determine one or more corresponding object data source records (DSRs). The one or more object DSRs can be imported within a data platform system.

Abstract: Systems, methods, and non-transitory computer readable media may be configured to access first database and a second database. The first database may be structured for a first data type, and may include a first data of the first data type. The second database may be structured for a second data type different from the first datatype, and may include a second data of the second data type. The second data may be associated with the first data. A first information request relating to the first data and a second information request relating to the second data may be received. A first response to the first information request may be determined based on the second data. A second response to the second information request may be determined based on the first data. An interface, through which the first response or the second response is accessible, may be provided.

Abstract: Systems and methods are provided for production and display of map based slide presentations. The system may provide a map of a geographic region via a map interface and select a portion of the geographic region for creation of a slide. The slide may be created to incorporate all of the data within the selected portion and may be part of a series of slides in a presentation. The user may further provide access controls to data aspects within the slide and the system may use the access controls to regulate display of the slide.

Abstract: A user data visualization and parsing system may receive from a user a selection of a first data item from a data set, the data item associated with a location identifier. The data visualization and parsing system may extract a first value of the first data item associated with the location identifier and identify, in a second data set of the data stream, a second data item associated with the location identifier. The system may extract a second value of the second data item associated with the location identifier, generate a visual representation of the first and second values, and display the visual representation to the user through the user interface.

Abstract: Techniques for contextual modification of data sharing constraints in a distributed database system are disclosed. The constraint modifications can improve data sharing processes, particularly in applications that involve cross-model data sharing and/or have a need for low data latency.

Abstract: In various example embodiments, a vector modeling system is configured to access a set of data distributed across client devices and stored in a structured format. The vector modeling system determines vector parameters and vector templates suitable for the set of data and transforms the set of data from the structured format into a second format including one or more vectors based on one or more transformation strategies. The vector modeling system stores the transformed data and performs machine learning analysis on the vector.

Abstract: Electronic note management via a connected entity graph.

Abstract: Systems, methods, and non-transitory computer readable media are provided for recursively searching a plurality of workspaces of the system for linked data associated with the seed data, initiating an endpoint process for each the seed data and the linked data, and, upon completion of the search, delete the seed data and the linked data identified based at least in part on the endpoint process. The process may be automatically repeated at a predetermined time interval to identify and remove future data that is stored in the plurality of datasets.

Abstract: Systems and methods are provided for investigation network activities. Network activity information may be accessed. The network activity information may describe for an individual (1) respective relationship with one or more persons; and (2) respective activity status information indicating whether a given person has engaged in a particular activity. A network activity graph may be generated based on the network activity information. The network activity graph may include two or more nodes representing the individual and the one or more persons. Connections between the nodes may represent the respective relationships between the individual and the one or more persons. Data corresponding to the network activity graph may be presented through an interface.

Abstract: A search request relating to one or more datasets in the data repository can be received, the search request comprising a display request to display at least a portion of the one or more datasets. In response to the search request, a searchable database can be generated from the one or more datasets in a data repository based on ontological data associated with the one or more datasets. An object view of at least the portion of one or more datasets can be generated from the searchable database, the view being generated based on the ontological data. The generated object view can be provided to be displayed on a display device.

Abstract: An approach for transforming a large dataset using user interface-based transformations applied to a sample of the dataset is disclosed. The sample of the large dataset has the same or similar format as the large dataset. A user can quickly apply transformations to the sample dataset using UI-based instructions. The UI-based instructions can be used to create a transformation job that can be configured to run on a backed database, such as a distributed database, to apply the transformations to the large dataset.

Abstract: Systems and methods are provided for identifying and compiling information relating to an entity for investigative analysis. The system may comprise one or more processors and a memory storing instructions that, when executed by the one or more processors, cause the system to search, in one or more data sources, with a plurality of known characteristics of an entity to obtain a first plurality of records, identify from the first plurality of records a subset of records that match the known characteristics with a substantial confidence, compile the subset of records to form a unified record representing the entity and conduct a second search with information from the unified record to obtain a second plurality of search results.

Abstract: Example embodiments relate to a system to generate and cause display of a specially configured graphical user interface to receive and present collections of images. According to certain example embodiments, an image analysis system: receives an image file from a client device; generates a hash value based on the image file; performs a comparison of the hash value with a list that comprises a collection of hash values; identifies a match to the hash value among the collection of hash values; assigns a label to the image file in response to identifying the match among the collection of image files from the list; and indexes the image file at a memory location identified by the label assigned to the image file.

Abstract: Systems and methods are provided for performing context-based keyword searching using a search bar. Based on search terms received via the search bar, the system may be configured to provide suggested search parameters to associate with that search term. The suggested search parameters may each include a type of data and/or a filter to associate with the search term (e.g., name, phone number, date of birth, etc.). The one or more suggested search parameters may be identified based on the search term itself, a list of possible types of data or filters, a preliminary search of one or more datasets, a record of one or more previous searches performed, requirements associated with one or more searchable datasets, the format of user input received via the search bar, and/or one or more other factors.

Abstract: A method, performed by one or more processors, including: receiving a user query; deriving, based on the user query, a search engine query for use with search engine software and a data access query for use with data access software; sending, to the search engine software, the search engine query to cause the search engine software to locate first data stored in a search engine index; sending, to the data access software, the data access query to cause the data access software to locate second data stored in a distributed data store; receiving, from the search engine software, the first data; and receiving, from the data access software, the second data.

Abstract: Methods, systems, and apparatus, including computer programs encoded on computer storage media, for network monitoring, user account compromise determination, and user behavior database system. The system monitors network actions of user accounts including user account access across multitudes of network accessible systems, determines user account transitions, and determines different types of high-risk user behavior indicative of compromise. Network actions can be obtained from generated information by the network accessible systems, and correlated across additional data sets including contextual ones. User interfaces are generated describing network actions of user accounts, and are configured for user interaction, which cause generation of updated user interfaces and access to electronic data sources to determine information relevant to the user interaction.

Abstract: A computer-implemented system or process is programmed or configured to use a configuration file to specify one or more tasks to apply to raw ingested data. A task may be a sequence of instructions programmed or configured to format raw ingested data into a dataset in a CSV format. Examples of tasks may include: a parser to parse Cobol data into a CSV, a parser to parse XML into a CSV, a parser to parse text using fixed-width fields to a CSV, a parser to parse files in a zip archive into a CSV, a regular expression search/replace function, or formatting logic to remove lines or blank lines from raw ingested data. In one embodiment, the configuration file may specify a schema definition for a task to use for generating a dataset. In one embodiment, the configuration file may also include one or more access control list (ACL) definitions for the generated dataset. In one embodiment, the building of datasets using the configuration file is automated, for example, on a nightly basis.