Abstract: Systems and methods are provided for integrated data analysis. At least one object that is responsive to a first search query is determined. The object is stored in an object model that is managed by a first computing platform, and the at least one object is associated with one or more properties. One or more data sets that are responsive to a second search query are determined. The data sets are managed by a second computing platform. The one or more data sets are determined related to the at least one object. The at least one object is updated to include at least one property that references at least one analysis that relies on the one or more data sets.

Abstract: A security system detects and attributes anomalous activity in a network. The system logs user network activity, which can include ports used, IP addresses, commands typed, etc., and may detect anomalous activity by comparing users to find similar users, sorting similar users into cohorts, and comparing new user activity to logged behavior of the cohort. The comparison can include a divergence calculation. Origins of user activity can also be used to determine anomalous network activity. The hostname, username, IP address, and timestamp can be used to calculate aggregate scores and convoluted scores. The system extracts features from the logged anomalous network activity, and determines whether the activity is attributable to an actor profile by comparing the extracted features and attributes associated with the actor profile based upon previous activity attributed to the actor.

Abstract: In an embodiment, a data processing method comprises creating and storing a plurality of analytical notebooks in digital computer storage, wherein each of the analytical notebooks comprises notebook metadata that specifies a kernel for execution, and one or more computational cells, wherein each of the cells comprises cell metadata, a source code reference and an output reference; receiving, in association with a first cell among the one or more cells, first input specifying computer program source code of a function, wherein the function defines an input dataset, a transformation, and one or more variables associated with output data; storing the first cell, excluding the output data, using a first digital data storage system and updating the source code reference to identify the first data storage system; using the kernel specified in the notebook metadata, executing an executable version of the source code to result in generating the output data; storing the output data using a second digital data storage

Abstract: In various embodiments, systems, methods, and techniques are disclosed for generating a collection of clusters of related data from a seed to assist in detection of financial malfeasance. Seeds may be generated based on seed generation strategies or rules. Clusters may be generated by, for example, retrieving a seed, adding the seed to a first cluster, retrieving a clustering strategy or rules, and adding related data (such as trades, emails or chat messages) and/or data entities to the cluster based on the clustering strategy. Various cluster scores may be generated based on attributes of data in a given cluster, and the clusters may be displayed and ranked based on their scores. Various embodiments may enable an analyst to review clusters of trades, emails and/or chat messages that are the most likely to reveal financial malfeasance.

Abstract: In an embodiment, a computer-implemented method comprises calculating a first relational classification score for a first node in a first graph; calculating a second relational classification core for a second node in a second graph; calculating a relational classification matching score for the first node and the second node that is based upon on the first relational classification score and the second relational classification score; calculating a composite score based at least upon the relational classification matching score; generating a canonical tuple that represents a match between the first node and the second node in response to determining that the composite score is equal to or greater than a specified threshold score value.

Abstract: In one embodiment, a computer-implemented process is programmed or configured to allow a first mobile device to generate and send enriched pin data to a geographical messaging system. Enriched pin data may include latitude and longitude data, a timestamp, and a media element. Media elements may include image data, video data, text data, drawing data that defines a geographic location, route data that defines a geographic travel path, and/or pin expiration data. The geographical messaging system may then broadcast the enriched pin data to a second mobile device belonging to a team member in the same geographical region as the first mobile device. The second mobile device may then use the enriched pin data to display, on a geographical map, a map pin that corresponds to the enriched pin data. In one embodiment, the second mobile device may also use the enriched pin data to display, in a message chain, a message related to the enriched pin data.

Abstract: Systems and methods are provided for storing a first data object comprising a first set of immutable components, the first data object being associated with a corresponding second data object stored by a remote replication system. A difference is determined between the first set of immutable components of the first data object and a second set of immutable components of the corresponding second data object. A subset of immutable components is identified from the first set of immutable components based on the difference. The subset of immutable components from the first set of immutable components is provided to the remote replication system over a communication network.

Abstract: Data transformation in a distributed system of applications and data repositories is described. The subsystems for the overall framework are distributed, thereby allowing for customization to require only isolated changes to one or more subsystems. In one embodiment, a source code repository is used to receive and store source code. A build subsystem can retrieve source code from the source code repository and build it, using one or more criteria. By building the source code, the build subsystem can generate an artifact, which is executable code, such as a JAR or SQL file. Likewise, by building the source code, the build subsystem can generate one or more job specifications for executing the executable code. In one embodiment, the artifact and job specification may be used to launch an application server in a cluster. The application server can then receive data transformation instructions and execute the data transformation instructions.

Abstract: An interactive vehicle information map system is disclosed in which, in various embodiments, geographical, geospatial, vehicle, and other types of data, geodata, objects, features, and/or metadata are efficiently presented to a user on an interactive map interface. In an embodiment, the user may search vehicle-related data via the interactive map by providing search criteria including, for example, information regarding a geographic area, a time period, a vehicle, a vehicle owner, and/or a license plate number, among other items. The map system may provide search results including a list of vehicles that match the search criteria, vehicle information, and/or points on the interactive map that indicate license-plate recognition read locations, among other information. In an embodiment, the user may view detailed information associated with particular vehicles including, for example, captured images, vehicle-owner data, event history, and the like. Further, the user may export data and/or create search alerts.

Abstract: Systems and methods are provided for providing continuous configuration deployment. A configuration definition object may be obtained from a remote datastore. The obtained configuration definition object may be stored in a local datastore. The configuration definition object may be obtained and stored in advance of a scheduled maintenance. The configuration definition object may be obtained in response to the configuration definition object being committed to the remote datastore. The configuration definition object may be used to generate different configuration objects. A configuration object may be generated from the configuration definition object and one or more system characteristics. A service request may be received, and the configuration object may be executed to perform a configuration of a computing system.

Abstract: In various embodiments, systems, methods, and techniques are disclosed for generating a collection of clusters of related data from a seed. Seeds may be generated based on seed generation strategies or rules. Clusters may be generated by, for example, retrieving a seed, adding the seed to a first cluster, retrieving a clustering strategy or rules, and adding related data and/or data entities to the cluster based on the clustering strategy. Various cluster scores may be generated based on attributes of data in a given cluster. Further, cluster metascores may be generated based on various cluster scores associated with a cluster. Clusters may be ranked based on cluster metascores. Various embodiments may enable an analyst to discover various insights related to data clusters, and may be applicable to various tasks including, for example, tax fraud detection, beaconing malware detection, malware user-agent detection, and/or activity trend detection, among various others.

Abstract: A system is described for controlling access to resources using an object model. Users can specify use cases for accessing resources. The user may be granted access if the user satisfies qualifications required for accessing the resource, selected a use case permissible for accessing the resource, and satisfies qualifications required for the use case. Use cases, qualifications, resources, and/or links between them can be implemented using an object model. The system can be used in addition to authentication and authorization.

Abstract: Systems, methods, and non-transitory computer readable media are provided for providing category-sensitive chat channels. A category-sensitive chat channel may be provided. The category-sensitive chat channel may be assigned a given category level. The given category level may determine a scope of content allowed in the category-sensitive chat channel. Information to be posted through the category-sensitive chat channel may be obtained. The obtained information may be filtered based on the given category level. The filtered information may be posted in the category-sensitive chat channel.

Abstract: A modal-less save interface enables a user to provide a filename under which to save a document at any time during operation of the application, without interrupting other user tasks of the application. The user inputs a filename and performs a save operation on a document without navigating menu items or launching a modal window. The modal-less save interface may be provided in a portion of the main application window. For example, the modal-less save interface may be presented in a toolbar, taskbar, status bar, window pane, or sidebar. An application may feature a modal-less access control interface. The modal-less access control interface may be provided in a portion of the main application window. The access control interface may comprise a control, such as link, button, checkbox, text box, or pull-down menu. Upon selection of the control, the application sets one or more access control levels for the current document.

Abstract: User interfaces for managing defects are provided. A defect selection interface may include a set of defect items for selection by a user. The defect selection interface may include one or more first visuals indicating similarity of the set of defect items to other defect items. An issue selection interface may include a set of issue items for selection by the user. Individual issue items may include one or more defect items added to the individual issue items. A defect comparison interface may include a comparison of a defect item to an issue item. The defect comparison interface may include one or more second visuals indicating similarity of the defect item to the issue item. Based on the user's selection, the defect item may be added to the issue item.

Abstract: A system with methodology for providing multi-language support for dynamic ontology. In one embodiment, for example, a method comprises: storing an ontology for a data store, wherein the ontology comprises a plurality of data types; for each data type of the plurality of data types: storing, in the ontology, one or more display values, wherein each display value is associated with a locale; determining a locale identifier corresponding to a particular locale; selecting a particular display value corresponding to the particular locale; displaying the particular display value.

Abstract: Computer implemented systems and methods are disclosed for associating records across lists, wherein the lists include a plurality of records and the plurality of records is associated with a respective entity. In accordance with some embodiments, the systems and methods further comprise grouping one or more records from a first list into a first group based on fields of the records in the first list, grouping one or more records from a second list into a second group based on fields of the records in the second list, pairing a record from the first group with a record from the second group, assessing each pair of records based on an evaluation of the respective pair according to fields of the pair, and associating records from the first group and records of the second group with an entity based on the assessment.

Abstract: Systems and methods are provided for identifying relevant information for an entity, referred to as a seed entity. A plurality of search queries can be generated each comprising a property of a seed entity or one of the entities associated with the seed entity (seed-linked entities). Preferably, a collection of search queries includes ones representing different properties of the seed entity and properties of different seed-linked entities. Optionally, the collection of search queries is optimized to reduce search burden. Searches can then be conducted with the search queries in one or more data sources to obtain a plurality of search results, wherein each search result comprises a hit entity and one or more entities associated with the hit entity (hit-linked entity).