Abstract: Data loss prevention (“DLP”) rules can be automatically applied to items during a migration. When a migration is performed, a migration engine may be configured with migration configuration settings which define the items to be migrated from the source system to the target system. The migration engine may also be configured with DLP configuration settings which define the type of items on which DLP should be performed. When the DLP configuration settings indicate that DLP should be applied to an item to be migrated, the migration engine routes the item to a DLP engine rather than directly migrating the item to the target system. After the DLP engine has processed the item, the DLP engine can return the processed item to the migration engine which in turn can migrate the processed item to the appropriate location in the target system.

Abstract: In one embodiment, a method includes selecting a set of logged user-initiated events of a user. The method further includes determining timing information, device-identification information, and user-location information for the set of logged user-initiated events. In addition, the method includes correlating the set of logged user-initiated events to recurring time intervals of a time map. Also, the method includes determining an overall density, a location-specific density, and a device-specific density of the set of logged user-initiated events for at least some recurring time intervals of the time map. Furthermore, the method includes generating a time-based activity pattern of the user, the time-based activity pattern comprising, for the at least some recurring time intervals of the time map, information related to the overall density, the location-specific density, and the device-specific density. In addition, the method includes publishing the time-based activity pattern to a scheduling interface.

Abstract: In an embodiment, a method includes receiving time-series data related to individual utilization rates of a plurality of central processing unit (CPU) cores. The method also includes, responsive to a trigger, transforming at least a portion of the individual utilization rates into a compressed value format, the transforming comprising: determining, from at least a portion of the time-series data, CPU-core utilization values of the plurality of CPU cores for a time constraint; evaluating the CPU-core utilization values against a preconfigured set of non-overlapping value ranges; responsive to the evaluating, determining a quantity of the CPU-core utilization values that correspond to each non-overlapping value range of the preconfigured set of non-overlapping value ranges; and generating a CPU-core utilization snapshot comprising the determined quantity of each non-overlapping value range of the preconfigured set of non-overlapping value ranges.

Abstract: The present disclosure provides for information handling systems and methods to configure and manage any number of heterogeneous devices. In various embodiments, a shared device configuration is simultaneously applied to a selected group of otherwise incompatible heterogeneous devices that may use different communication protocols and operating systems. Certain embodiments create and maintain a database of configuration and operational information that is accessible across platforms. A group device configuration may be automatically applied to all devices in the selected group via a batch command. Some embodiments allow independent heterogeneous devices that have similar functionality to have different device configuration settings.

Abstract: A method for determining mail archive ownership during data migration is described. The method is performed by a Migration Manager that is capable of generating a list of possible owners based on confidence level. The confidence level is obtained by scanning various messages associated with the mail archive and determining a frequency of appearance a particular user name (e.g., e-mail address) appears compared to the total number of messages scanned. The generated list of possible owners can subsequently be used to determine/confirm the owner of the mail archive. Confirmation may be required before the data migration is completed.

Abstract: Systems and techniques to automatically delete emails from an inbox associated with an employee in an enterprise are described. A message lifecycle engine that interfaces with a corporate email system may select an inbox of an email client application. The message lifecycle engine may delete an email in the inbox based at least in part on: (i) one or more sender rules associated with the email; (ii) one or more system rules associated with an email system used by the enterprise; (iii) one or more user rules created based on an analysis of user behavior; and (iv) one or more data loss prevention (DLP) policies.

Abstract: Systems and techniques to deputize agents in a system to reduce a number of event logs received by a coordinator are described. An agent belonging to a group of agents may receive a request to select a deputized agent. The agent may determine data associated with a component hosting the agent and send the data to a selection agent. The agent may receive a message from the selection agent indicating that the agent is to be the deputized agent. The deputized agent may receive one or more event logs from other agents in the group, determine that at least one event log has a high priority, and send the at least one event log to the coordinator. The deputized agent may store the one or more event logs in a storage device accessible to the hardware component.

Abstract: In one embodiment, a method includes executing at least one application. The method further includes collecting, at periodic intervals as the least one application executes, an application load of each of the at least one application. In addition, the method includes generating, based at least in part on the collecting, an application-behavior baseline for each of the at least one application. The application-behavior baseline includes a plurality of projected application loads over a future period of time. The application-behavior baseline has a configurable time resolution. The method also includes automatically determining, for a subperiod of the future period, a quantity of compute resources required to manage the at least one application in satisfaction of at least one performance criterion. Moreover, the method includes causing the determined quantity of compute resources to be proactively provisioned to the at least one application in advance of a start of the subperiod.

Abstract: A secure communication channel can be established between a recovery console and a recovery agent during an Active Directory disaster recovery. This secure channel can be established without employing the Kerberos or NT LAN Manager (NTLM) authentication protocols. Therefore, the recovery console and recovery agent will be able to establish a secure channel even when the domain controller is in Directory Services Restore Mode (DSRM) and NTLM is disabled. A secure channel can be established between the recovery console and the recovery agent based on the Microsoft Secure Channel (Schanel) Security Support Provider (SSP). The Schannel implementation can be modified in a manner that allows the client to be authenticated within the Schannel architecture.

Abstract: Systems and methods for using a synchronization mechanism to dynamically update instrumentation during program execution are described herein. Using the synchronization mechanism, a decision tree structure of instruments can be avoided, saving processing resources. The synchronization mechanism can be a field or the like that is declared using a synchronization primitive. For example, the synchronization primitive can be a volatile or synchronized keyword in some programming languages. The field can refer to a currently-selected instrument implementation, thereby avoiding using a decision-tree structure to find a desired instrument implementation.

Abstract: A risk analysis system of associated with an enterprise system for determining delegation risks associated with assigning candidate individuals to perform various tasks. In some cases, the delegation risk analysis system may generate individual delegation risk scores to each candidate individual to assist in the delegation of tasks throughout an organization. In some examples, the delegation risk analysis system may determine the delegation risk scores based on context risk factors associated with the task and the individual and intrinsic delegation risk factors associated with the enterprise system.

Abstract: The sequence of one or more searches can be altered to cause multiple searches to load and evaluate segments together. When a first search query is executed, a query processor can commence loading segments of an indexed store to thereby evaluate the first search query against the segments. Then, if a second search query is received while the first search query is executing, the query processor can cause the second search query to commence on the same segment that the first search query is currently being evaluated against. The first and second search queries can then continue execution together until the first search query has been evaluated against all segments. The query processor can then continue executing the second search query against the remaining segments until it reaches the segment on which its execution commenced.

Abstract: Techniques and mechanisms described herein facilitate the strengthening of a data fingerprint. According to various embodiments, a data stream may be parsed into a plurality of data chunks. A hash function may be applied to each of the data chunks to determine a respective data chunk hash value. A respective data chunk fingerprint for each of the plurality of data chunks may be transmitted to a remote server. Each data chunk fingerprint may include the respective data chunk hash value and one or more respective intermediate hash values.

Abstract: Systems and methods are described for identifying, tracking, and customizing dependencies between components of a computing environment. By providing greater insight and transparency into dependencies, the systems and methods can facilitate modeling the underlying architecture of applications and computer hardware. As a result, IT personnel can better track relationships between components. Custom filtering tools can also provide IT personnel with tools to switch from different types of dependency views that focus on application-oriented views, hardware-oriented views, or other custom views. Model annotation tools can also enable IT personnel to customize a dependency model to reflect real-world application and hardware monitoring conditions.

Abstract: In one embodiment, a method is performed by a computer system. The method includes receiving a request to authenticate a user of an enterprise computing system. The method further includes, responsive to the request, selecting a set of previous user-initiated events of the user on the enterprise computing platform. Further, the method includes accessing user-specific event information related to the selected set of previous user-initiated events. In addition, the method includes generating, from at least a portion of the user-specific event information, a user-specific authentication sequence comprising a plurality of event-information requests. Additionally, the method includes administering the user-specific authentication sequence to the user, the administering comprising requiring the user to provide a valid response to each of the event-information requests as a precondition to successful authentication.

Abstract: A method for determining predictive response time for electronic mail across enterprise communication systems is described. In particular, the method includes collecting and subsequently analyzing communications of a particular recipient in order to determine a probability of a sender receiving a response from the recipient. In the event a response is probable, the method also determines a time frame when a response may be sent. In situations where the recipient is non-responsive, the method also provides a list of alternate recipients that the sender can communicate with, whereby the alternate recipients are more responsive than the original recipient.

Abstract: In some implementations a starter task to gather data associated with at least a portion of a communications system may be received. A plurality of targets associated with the starter task may be determined. A portion of the plurality of targets may be grouped, based on grouping criteria, to create a collection task. A plurality of bids may be received from a plurality of collection agents, where each bid of the plurality of bids includes a cost estimate to perform the collection task. A winning bid of the plurality of bids may be selected. A particular collection agent associated with the winning bid may perform the collection task.

Abstract: In one embodiment, a method includes determining a particular microservice to connect to an instance of a first container to provide a service. The method further includes identifying, from container metadata, one or more inputs of the first container. The method also includes searching the container metadata for containers that provide the particular microservice and whose outputs satisfy the one or more inputs of the first container. In addition, the method includes selecting a second container based on the searching, the second container comprising one or more outputs. Also, the method includes creating an instance of the second container. Furthermore, the method includes connecting the instance of the second container to the instance of the first container using the one or more outputs of the second container and the one or more inputs of the first container.

Abstract: In one embodiment, a method includes registering as a listener for availability notifications from at least one low-availability device. The method further includes determining a data-collection schedule of the at least one low-availability device. In addition, the method includes maintaining a prioritized queue comprising required data items needed from the at least one low-availability device. Also, the method includes preparing, in advance of the at least one low-availability device becoming available, a request for at least one required data item. The at least one required data item includes a highest-priority data item in the prioritized queue. The method additionally includes, responsive to a notification that the at least one low-availability device is available, transmitting the request to the at least one low-availability device.

Abstract: In one embodiment, a method includes identifying at least one transaction-path node as a problem node based, at least in part, on an analysis of end-to-end response times for a group of transactions. The method further includes determining one or more event types for the at least one transaction-path node. Also, the method includes, for each of the one or more event types, inferring a first event-relevance weight from an abstract model. The method also includes, for each of the one or more event types, inferring a second event-relevance weight from a concrete model. Furthermore, the method includes, for each of the one or more event types, determining an event relevance based, at least in part, on the first event-relevance weight and the second event-relevance weight. Additionally, the method includes identifying most-relevant events among a set of active events based, at least in part, on the determined event relevance.