Abstract: In one embodiment, a method includes receiving a trigger to deploy a particular container on cloud resources accessible thereto such that the cloud resources are provided by a plurality of cloud providers and such that the computer system and the plurality of cloud providers are configured to negotiate container deployment using an information exchange protocol. The information exchange protocol includes a preconfigured inquiry format and a preconfigured inquiry-response format. The method further includes generating a performance inquiry in relation to the particular container. In addition, the method includes transmitting the performance inquiry to the plurality of cloud providers. Moreover, the method includes receiving inquiry responses from at least some of the plurality of cloud providers. Additionally, the method includes causing the particular container to be deployed on resources of the particular cloud provider.

Abstract: A recovery solution can employ virtualization software to create a virtualized Active Directory forest from a source Active Directory forest. A recovery agent can be installed on the domain controllers prior to creating copies of the domain controllers in the virtualized forest. Additionally, the recovery agent can be added to a list of trusted applications if the domain controller includes security software. The recovery solution can employ the virtualization software to store a command file at a known directory path. This command file can include commands that should be executed on the virtualized domain controller to configure it properly. The recovery agent can be configured to periodically scan the known directory path to determine whether a command file has been stored in the directory. If the recovery agent locates a command file, it can extract and execute any commands in the command file.

Abstract: In one embodiment, a method includes receiving a request for a value of at least one data element defined by a master data management (MDM) model, wherein the at least one data element is based, at least in part, on monitoring data collected from a monitored system. The method further includes determining from a central data store whether the at least one data element is centrally stored or is federated. The central data store maintains a common representation of a plurality of data elements in conformance to the MDM model. The MDM model is extended to indicate whether each data element of the plurality of data elements is centrally stored or is federated. The determining is based, at least in part, on the indication.

Abstract: In one embodiment, a method is executed by an information handling system comprising computer hardware. The method includes monitoring a desktop environment of a user for a desktop-administration event. The method further includes, responsive to a detected occurrence of the desktop-administration event, identifying at least one script-execution process to invoke. The at least one script-execution process executes at least one privilege-agnostic desktop-administration script. The method also includes determining whether the at least one script-execution process is designated for privilege elevation. Moreover, the method includes, responsive to a determination that the at least one script-execution process is designated for privilege elevation, injecting a security token of the at least one script-execution process with elevated privileges to yield a privilege-injected script-execution process.

Abstract: Certain embodiments of the present disclosure provide systems and associated methods for dynamically re-serializing virtual tape library cartridges. The system comprises a first server node including a first virtual tape library residing on a deduplication file system, in which a backup data file corresponding to a first cartridge is stored in a first container with a first base prefix. A second server node includes a second virtual tape library residing on a second deduplication file system, and is configured to receive and store a replica of the backup data file corresponding to a second cartridge in a second container such that the second cartridge includes the same first base prefix as the first cartridge. An activation code is assigned to the second container, and used to re-serialize the first base prefix to form a second base prefix such that the second cartridge is presented with the second base prefix.

Abstract: Techniques and mechanisms described herein facilitate the encryption of content using content-based encryption keys. According to various embodiments, data stream may include one or more data chunks. A client machine may apply a hash function to a data chunk to determine a fingerprint value. A cryptographic protocol shared with a remote server may be applied to the fingerprint value to determine a data chunk encryption key. The data chunk encryption key may be used to encrypt the data chunk, and the encrypted data chunk may be sent to the remote server for storage.

Abstract: A network-based solution that provides enhances management of migration and archiving operations may involve, as embodied in various systems, methods, and non-transitory computer-readable storage media, performing a pre-transfer assessment on each of a plurality of accessed mailboxes designated for migration or archiving. Performing the pre-transfer assessment may include designating one or more emails for exclusion from the migration or archiving operation after applying transferability rules and exception rules to each email message contained in the assessed mailbox. The solution may involve notifying the user about the email messages designated for exclusion and performing one or more user selected actions on the email message or related attachment files.

Abstract: A network includes a workflow management system coupled to an administrator device, and servers coupled to a user device. A network change auditing system receives and stores workflow definitions from the workflow management system that are associated with respective workflows provided by the servers. The network change auditing system receives and stores activity events from the servers that are associated with instructions from user devices to the servers. The network change auditing system associates a first subset of the activity events with a first workflow based on the first subset of the activity events being defined by a first workflow definition. The network change auditing system receives an identification of a first activity event from an administrator device and, in response, provides an identification of the first workflow and at least one second activity event in the first subset of the activity events for display on the administrator device.

Abstract: A risk engine can be configured to produce a total risk score by combining a set of risk factors. A risk policy can define a percentage that is to be assigned to each risk factor that is present in a request to access a web-accessible application. The percentage can represent the amount of risk that can be attributed to the access request when the risk factor is present in the request. The risk policy can also define which mitigating factors apply to each risk factor. Each mitigating factor can also be assigned a percentage by which the mitigating factor will reduce the risk factor when the mitigating factor and risk factor are present in the access request. The risk factors can then be combined to produce the total risk score. The total risk score can be generated as a percentage between 0% and 100%.

Abstract: A method for migrating a nickname cache via a migration manager is described. The method includes the migration manager locating where the nickname cache is stored and locating where the nickname cache is to be migrated. Once the source and target devices are located, the migration manager can generate any necessary transformations so that the data migrated from the source device to the target device is compatible. The nickname cache can then be extracted from the source device, transformed and stored into the nickname cache of the target device.

Abstract: Embodiments of the present disclosure include systems and methods for providing query service of secured contents. A data collection service collects data and security context associated with the data from a data source and stores the data with the security attributes in a datastore, where the security attributes are derived from the security context and used to determine access to the data so that access to the data is consistent with the security context. Upon receiving a query and a user context of a requester making the query of the datastore, a set of query results is obtained. Based on the user context and security attributes, it is determined whether the requestor has a proper right to access the query results. If the requestor has a proper right to access the query results, access to the query results is granted.

Abstract: In one embodiment, a method includes continuously receiving time-series data for end-user transactions occurring on one or more monitored systems. The method further includes continuously processing and storing the time-series data in a plurality of virtual machines. In addition, the method includes, responsive to a determined time-series-data burst, spawning one or more temporary virtual machines. Moreover, the method includes, during the determined time-series-data burst, continuously processing and storing the time-series data in the plurality of virtual machines and in the one or more temporary virtual machines. The method also includes, responsive to a determined conclusion of the determined time-series-data burst, causing the one or more temporary virtual machines to transition to a passive state in which the one or more temporary virtual machines cease processing and storing new time-series data but make previously-stored time-series data available for access.

Abstract: Systems and techniques to identify and modify unused (or seldom used) access privileges are described. Group membership data may be correlated with access map data to create a user-resource access map identifying privilege levels associated with individual user accounts to access computing resources in a computing system. User activity event logs generated as a result of user accounts accessing the resources may be correlated with the user-resource access map to identify user accounts that do not use (or seldom use) particular privilege levels to access particular resources. The identified user accounts may be modified to remove the unused (or seldom used) privileges levels.

Abstract: In one embodiment, a method is performed by a computer system. The method includes receiving monitoring data obtained from a plurality of monitored resources in a computing environment. The method further includes transforming the monitoring data into an integrated topology model (ITM) instance of interconnected topology objects. The method further includes measuring session performance using the transformed monitoring data of the ITM instance. Also, the method includes publishing information related to measured session performance to a user dashboard.

Abstract: In one embodiment, a method includes identifying virtual meetings previously mediated by one or more communications platforms. The method further includes determining attributes of the virtual meetings. In addition, the method includes collecting time-indexed performance data of individual media streams of the virtual meetings. The method also includes individually correlating the time-indexed performance data to at least a portion of the attributes of the virtual meetings on a per virtual-meeting basis. Further, the method includes selecting one or more virtual-meeting attributes. Also, the method includes extracting multi-stream performance data of those of the individual media streams that have the one or more virtual-meeting attributes. Additionally, the method includes correlating the multi-stream performance data to a time map. The method further includes determining aggregate multi-stream performance. Moreover, the method includes generating a time-based performance pattern.

Abstract: Systems, methods, and devices are disclosed herein for data deduplication and storage. Methods include identifying first criteria associated with a data block included in a plurality of data blocks, the data block being identified based on a blockmap and an index, the blockmap characterizing a file stored in a deduplication repository, the index identifying data store identifiers, reference count data, and second criteria associated with the plurality of data blocks. The second criteria include the first criteria, and the first criteria characterize input/output (I/O) activity associated with the data block. The methods may also include identifying data stores based on the first criteria, the data stores being included in data storage tiers. The data stores are identified based on the I/O activity associated with the data block. The methods further include updating the first criteria stored in the index and associated with the data block.

Abstract: In one embodiment, a method is performed by a computer system. The method includes, responsive to deployment of at least one component of a virtual desktop infrastructure (VDI) in a multilayer VDI architecture, creating an integrated topology model (ITM) instance of interconnected topology objects, the ITM instance comprising: a physical-and-virtual infrastructure topology model (PVI-TM) instance comprising first interconnected topology objects; a VDI topology model (VDI-TM) instance comprising second interconnected topology objects; and an access gateway topology model (AG-TM) instance comprising third interconnected topology objects. The method further includes generating dependencies between the interconnected topology objects of the ITM instance, wherein the dependencies comprise. In addition, the method includes generating a dependency graph for the multilayer VDI architecture based, at least in part, on the dependencies.

Abstract: The performance of a server can be improved by causing multiple searches to load segments of an index and search within them together. When multiple search requests are received and executed within a minimal time difference, the first search can be delayed to allow the second search—and possibly additional searches—to catch up so that the searches do not require loading segments multiple times.

Abstract: A system, method, and computer-readable medium for dynamically partitioning a directory list to limit recipients to an appropriate context. More specifically, in certain embodiments the dynamic partitioning includes a first component which describes a priori categories. In certain embodiments, the a priori categories could include “inner circle” or “trusted advisors” categories. Other categories could include “friends of the DL” who only want occasional but relevant messages. In certain embodiments, these categories are created by a DL owner. However, in certain embodiments, members (e.g., recipients) could also change their own category. For example, a DL could have categories: All, Required participants, FYI participants, Managers.

Abstract: In particular embodiments, a method comprising, by one or more computing devices, installing an application on a portion of a physical disk system of a first platform, virtualizing the portion of the physical disk system into a virtual disk system, comprising, storing data in the portion of the physical disk system in a database of the virtual disk system, providing an interface to access the data stored in the database, and providing a plurality sets of drivers for a plurality of platforms, wherein each set of drivers supports native operations with respect to the portion of the physical disk system on a different one of the plurality of platforms, mounting the virtual disk system on a second platform, and executing the application on the second platform, wherein all operations in connection with executing the application are contained within the virtual disk system mounted on the second platform.