Abstract: Systems and methods are provided for managing states of deployment. A presence of a configuration change to be implemented at a deployment may be detected. The configuration change may include one or more commands to change a configuration of the deployment. Responsive to detecting the presence of the configuration change, information describing the configuration change may be stored in a repository. The information may be stored in an unsubstituted form and a substituted form. An interface through which configuration change information is accessible may be provided. The configuration change information may describe the configuration change at the deployment based on one or both of the unsubstituted form and the substituted form.

Abstract: Systems, methods, non-transitory computer readable media can be configured to access a plurality of sensor logs corresponding to a first machine, each sensor log spanning at least a first period. Access first computer readable logs corresponding to the first machine, each computer readable log spanning at least the first period, the computer readable logs comprising a maintenance log comprising a plurality of maintenance task objects, each maintenance task object comprising a time and a maintenance task type. Determine a set of statistical metrics derived from the sensor logs; determine a set of log metrics derived from the computer readable logs. Determine, using a risk model that receives the statistical metrics and log metrics as inputs, fault probabilities or risk scores indicative of one or more fault types occurring in the first machine within a second period.

Abstract: Systems and methods are disclosed for detecting confidential information emails. In accordance with one implementation, a method is provided for detecting confidential information emails. The method includes obtaining a sender address of an electronic message, the sender address comprising a first username and a first domain name, and obtaining at least one recipient address of the electronic message, the recipient address comprising a second username and a second domain name. The method also includes determining whether the recipient address and the sender address are different addresses of a user, and based on the determination, flagging the electronic message.

Abstract: Various systems and methods are provided that retrieve raw data from issuers, reorganize the raw data, analyze the reorganized data to determine whether the risky or malicious activity is occurring, and generate alerts to notify users of possible malicious activity. For example, the raw data is included in a plurality of tables. The system joins one or more tables to reorganize the data using several filtering techniques to reduce the processor load required to perform the join operation. Once the data is reorganized, the system executes one or more rules to analyze the reorganized data. Each rule is associated with a malicious activity. If any of the rules indicate that malicious activity is occurring, the system generates an alert for display to a user in an interactive user interface.

Abstract: Aspects of the present disclosure involve a data audit system to generate and cause display of a tracking interface at a client device, wherein the tracking interface is configured to facilitate the visualization of tracking data retrieved from multiple sources. The audit system is configured to access a data source to retrieve tracking data that includes an associated asset identifier that identifies a subject of the tracking data, to link the retrieved tracking data to a data object at a database of the audit system based on the asset identifier, and to generate and cause display of a visualization of the tracking data within a tracking interface.

Abstract: Aspects of the present disclosure relate to alerting. A server accesses a user-provided specification, the user-provided specification indicating an initial alert range for a measured value and a subsequent alert schedule for the measured value. The server monitors a physical measurement of the measured value. The server determines that the physical measurement falls within the initial alert range. The server provides an initial alert in response to the physical measurement falling within the initial alert range. The server provides a subsequent alert according to the subsequent alert schedule in the user-provided specification.

Abstract: Embodiments of the present disclosure relate to systems, techniques, methods, and computer-readable mediums for one or more database systems configured to perform image identification of an image captured using a remote mobile device, and display of identity information associated with the captured image on the remote mobile device, in communication with the database system(s). A system obtains an image captured using a camera on a remote mobile device and performs image analysis to identify the captured image using reference images in one or more databases. The system can present the results for display an interactive user interface on the remote mobile device.

Abstract: A data normalization system receives a first string and a second string that are ordered according to an initial string ordering. The data normalization system analyzes, the first string and the second string based on a list of known character sets included in surnames, yielding an analysis, and determines, based on the analysis, that a set of characters in the second string matches a known character set included in the list of known character sets included in surnames. In response to determining that the set of characters in the second string matches a known character set included in the list of known character sets included in surname, the data normalization system orders the first string and the second string according to an updated string ordering.

Abstract: Techniques are provided for more efficient multi-row atomic, consistent, isolated and durable (ACID)-compliant transactions with snapshot isolation semantics (or just “multi-row transactions” for short). In some embodiments, the techniques are implemented in a computing system that includes a client application, a lightweight in-memory lease-based lock service, a multi-row transaction orchestrator, and an underlying database system. The transaction orchestrator implements a read protocol and a write protocol that provides support to the client application for carrying out multi-row transactions against the underlying database system irrespective of whether the database system itself supports multi-row transactions. The transaction orchestrator explicitly maintains transaction-level locks obtained from the lease-based lock service as part of the transaction protocol.

Abstract: A system is configured to provide a dashboard creation system. Panels associated with queries for retrieving information from a database are shown in a user interface. Various other user interfaces show query code, panel display settings, function code, dependencies, etc. The dependencies can be extracted and used to provide autocomplete and partial refreshing. A timing table shows execution times. Panel outputs and code updates can be shown and compared.

Abstract: System and method for terminating instances and autoscaling instance groups of computing platforms. For example, a method includes determining whether an instance of an instance group is identified as eligible for termination. The method further includes, in response to determining that the instance of the instance group is identified as eligible for termination, terminating the eligible instance. The terminating the eligible instance includes, in response to a runtime of the eligible instance being equal to or larger than a predetermined maximum lifetime, terminating the eligible instance.

Abstract: Systems and methods are provided for selecting training examples to increase the efficiency of supervised active machine learning processes. Training examples for presentation to a user may be selected according to measure of the model's uncertainty in labeling the examples. A number of training examples may be selected to increase efficiency between the user and the processing system by selecting the number of training examples to minimize user downtime in the machine learning process.

Abstract: Techniques for secure and efficient interfacing with a cloud computing service are described. In an embodiment, a cloud computing management service is programmed or configured to communicate with a cloud computing service. The cloud computing management service can be accessed by software engineers that are looking to deploy a software instance to a computing device of the cloud computing service. Thus, the cloud computing management service acts as an intermediary layer in front of the cloud computing service. In an embodiment, the cloud computing management service may store one or more frequently-used system parameters for deployment of software instances. The parameters conform to company's security protocols, compliance protocols, and/or other standards.

Abstract: In various example embodiments, a textual identification system is configured to receive a set of search terms and identify a set of textual data based on the search terms. The textual identification system retrieves a data structure including textual identifications for the set of textual data and processes the data structure to generate a modified data structure. The textual identification system sums rows within the modified data structure and identifies one or more elements of interest. The textual identification system then causes presentation of the elements of interest in a first portion of a graphical user interface and the textual identifications for the set of textual data in a second portion of the graphical user interface.

Abstract: A method and system for data pipeline monitoring receives an event data object and a current status data object from one or more subsystems of a pipeline. The system analyzes the event data object and the current status data object to determine a first and second validation value. The system, in response to determining that either the first or second validation value is not valid, sends a notification.

Abstract: A computer-based investigative analysis system is disclosed in which a user can share results of an investigation with other users in a way that allows the sharing user to visualize how the results will be shared before they are shared. The results are shared in the form of a visual graph having nodes, edges, and other presentation elements. The nodes represent data objects that are the subject of the investigation and the edges represent connections between the data objects. The graph is shared in the form of an automatically generated redacted graph omitting nodes, edges, and presentation elements for which the other users do not have permission to view. Before sharing the graph, the sharing user is presented with a visualization of the automatically generated redacted graph providing the user an opportunity to confirm that sharing the redacted graph will not constitute an unauthorized information leakage.

Abstract: Systems and methods are provided for identifying and compiling information relating to an entity for investigative analysis. The system may comprise one or more processors and a memory storing instructions that, when executed by the one or more processors, cause the system to search, in one or more data sources, with a plurality of known characteristics of an entity to obtain a first plurality of records, identify from the first plurality of records a subset of records that match the known characteristics with a substantial confidence, compile the subset of records to form a unified record representing the entity and conduct a second search with information from the unified record to obtain a second plurality of search results.

Abstract: A mobile data analysis system is provided that enables mobile device location tracking, secure messaging, and real-time sharing of intelligence information, among other features. In one embodiment, a method and apparatus is provided for creating data objects from one or more digital images captured by a mobile device. A computing device receives a first digital image file comprising first image metadata, wherein the first image metadata includes one or more image properties each having an image property value. The computing device transforms one or more of the image property values of the one or more image properties into one or more particular values. The computing device populates one or more data object property values of a data object with the one or more particular values. The computing device stores the data object in a data repository.

Abstract: Aspects of the present disclosure relate to computer system security. A machine accesses a set of records corresponding to a set of users having access to a computer system. The machine stores, for each user in the set of users, a baseline profile representing baseline activity of the user with respect to a set of data sources of the computer system. The machine monitors activity of the set of users with respect to the set of data sources. The machine determines, based on monitoring the activity of the set of users, that a user action of a specified user, with respect to one or more data sources from the set of data sources, is anomalous relative to the baseline profile of the specified user. The machine provides a digital transmission representing the anomalous user action.

Abstract: Techniques related to searches of highly structured data are described. A body of data may be represented by an object-centric data model. For a search of the body of data, an indication of a particular search template to use may be received. The particular search template may specify one or more hierarchical object types that are within a scope of the search. The one or more hierarchical object types may be defined in the object-centric data model. The particular search template may specify at least one search field. A user interface may be generated based on the particular search template. The user interface may include the at least one search field.