Abstract: In an embodiment, a method is performed by a computer system. The method includes determining a scope of widget discovery in a content-management system. The method further includes automatically identifying widget instances of the content-management system that are within the determined scope of widget discovery. In addition, the method includes discovering attributes of the identified widget instances on a per widget-instance basis. The method also includes storing in memory widget-instance relationship data comprising the determined attributes of the identified widget instances. Moreover, the method includes receiving a multi-widget-instance change definition, wherein the multi-widget-instance change definition articulates a specified change to unspecified widget instances which share a specified widget-instance attribute.

Abstract: In one embodiment, a method is performed by a computer system comprising physical computer hardware. The method includes discovering a controlling-user network for at least one user. The controlling-user network comprising a plurality of controlling users. The plurality of controlling users each control one or more sites of a content-management system. The method further includes profiling the plurality of controlling users based, at least in part, on information gleaned from sites on the content-management system controlled by the plurality of controlling users. In addition, the method includes exposing the controlling-user network to the at least one controlling user using a result of the profiling.

Abstract: Systems and methods for providing structured query language (SQL) access to non-relational data stores are described. SQL access can be provided to a non-relational data store in one embodiment by mapping storage attributes of the data store to one or more virtual relational tables. The virtual tables can include a schema representation of data stored in a non-relational data store without actually including the data in the virtual tables. In some embodiments, these systems and methods therefore advantageously merge certain benefits of relational database architectures with the scalability benefits of certain non-relational data store architectures. Certain features of the systems and methods described herein can also be used with existing relational databases. For example, the systems and methods described herein can perform join or similar operations between a relational table in one data store and a data object in another data store.

Abstract: In one embodiment, a method is performed by a computer system. The method includes monitoring events in relation to files stored at multiple network nodes and, responsive to the monitoring, detecting that a new file has been created from an existing file. The method further includes accessing a stored file-family model of the existing file, the stored file-family model comprising interconnected nodes, wherein the interconnected nodes represent a plurality of overlapping file variants such that one of the interconnected nodes represents the existing file. In addition, the method includes logically connecting the existing file and the new file in the stored file-family model. The method also includes determining a primary file variant in the stored file-family model and, responsive to a determination that the existing file is not the primary file variant, notifying one or more users.

Abstract: In one embodiment, a method is executed by a computer system. The method includes receiving information related to a platform-portable workload, the information comprising a data security policy expressed as digitally signed metadata. The data security policy specifies one or more data security features that any platform executing the platform-portable workload should implement. The method further includes validating the digitally signed metadata as originating from an issuer of the platform-portable workload. In addition, the method includes, responsive to successful validation of the digitally signed metadata, automatically determining whether a particular platform can satisfy the data security policy based, at least in part, on a comparison of the digitally signed metadata with data security attributes of the particular platform.

Abstract: A system for monitoring devices in a network comprising a coordinator operating on a first processor and configured to detect a plurality of active devices and to install an audit agent on each of the plurality of active devices. The audit agents configured to obtain configuration data for the active device that they are installed on using a processor of the active device, and to obtain configuration for each of a plurality of passive devices that the active device can access, where the passive devices are unable to support installation of an audit agent, and to transmit the configuration data to the coordinator. The coordinator configured to receive the configuration data for the active device and for the passive devices and to store the configuration data in a format that allows the configuration data to be selectively retrieved for the active device and the passive devices.

Abstract: Systems and methods for detecting and evaluating data migrations over a network are described. More specifically, a Migration Manager is provided to detect data migrations over the network and determine whether the performance of the data migration is satisfactory. In situations where the current data migration is too slow, the Migration Manager may postpone or reschedule the data migration for another time.

Abstract: A system for auditing authorized key files associated with secure shell (SSH) servers is disclosed. In an example, the system may include a purpose-built SSH audit server. The SSH audit server may be configured to receive an authorized key file and a list of users. The SSH audit sever may generate and provide unique registration codes for each of the users in the list. The SSH audit server may associate particular users with particular public keys as each of the users accesses the SSH audit server using a public key and inputs a registration code.

Abstract: A system, method, and computer-readable medium are disclosed for collecting and transmitting diagnostics information via a diagnostic information operation. The diagnostic information operation begins with a system periodically writing diagnostic information such as diagnostic errors and warnings to non-volatile local storage contained within the system. Upon detection of a failure, the user activates an NFC-enabled device (such as a mobile device) and positions the NFC-enabled device within NFC range of the failed system. The failed system then communicates the diagnostic information stored within the non-volatile local storage to NFC-enabled device.

Abstract: A network-based solution that provides enhanced management of migration and archiving operations may involve, as embodied in various systems, methods, and non-transitory computer-readable storage media, performing a pre-transfer assessment on each of a plurality of accessed mailboxes designated for migration or archiving. Performing the pre-transfer assessment may include designating one or more emails for exclusion from the migration or archiving operation after applying transferability rules and exception rules to each email message contained in the assessed mailbox. The solution may involve notifying the user about the email messages designated for exclusion and performing one or more user selected actions on the email message or related attachment files.

Abstract: A privileged account management system can maintain a database that defines a normal amount of time that it takes to perform a task associated with a reason code. When an administrator requests admin credentials for accessing a server, the administrator can provide a reason code which defines a task that the administrator intends to accomplish. A PAM system can maintain a database that defines, for each reason code, a normal amount of time that is required to accomplish the task associated with the reason code. The PAM system can then monitor an elapsed time over which the admin credentials are checked out to an administrator to determine whether the elapsed time exceeds the corresponding normal amount of time. If the elapsed time exceeds the normal amount, the PAM system can take appropriate action to mitigate any potential harm to the server.

Abstract: Techniques and mechanisms described herein facilitate the encryption of content using content-based encryption keys. According to various embodiments, data stream may include one or more data chunks. A client machine may apply a hash function to a data chunk to determine a fingerprint value. A cryptographic protocol shared with a remote server may be applied to the fingerprint value to determine a data chunk encryption key. The data chunk encryption key may be used to encrypt the data chunk, and the encrypted data chunk may be sent to the remote server for storage.

Abstract: Methods, systems, and apparatuses for creating collections of associated accounts for a migration process. An example system includes a processing device and memory that stores accounts in accordance with a first email, identity or file domain. The processing device may create a collection of related accounts stored in accordance with a first email, identity or file domain based on active directory information of the stored accounts and may migrate information included in the collection of accounts into a second email, identity or file domain. The collection includes one or more first-level accounts that are identified as having a relationship with a predefined root account based on a delegation attribute.

Abstract: Disclosed are systems and methods that allow a database engine to access a non-relational document database and dynamically apply a schema that maps documents comprising semi-structured data into a relational data structure. In embodiments, mapping may be accomplished by parsing and analyzing a set of sample documents to empirically generate a normalized tabular schema. In embodiments, the schema accommodates format evolution and variability of documents having different structures and different sets of attributes is automatically executed in a background process without requiring user involvement. This normalization process eliminates the need to create unique modeling languages for semi-structured data. In embodiments, an SQL dialect may be used to join query results and combine the resulting document data with tables from different dimensional or relational databases to generate a combined result without the need to create additional temporary tables for non-conforming documents.

Abstract: Aspects of the present disclosure relate to systems and methods for multi-data source query implementation and aggregation. In embodiments, the query aggregation system comprises a data abstraction engine, a query controller or scheduler and an aggregator. In embodiments, the data abstraction engine normalizes data schemas from multiple data sources based on the parameter requirements. In embodiments, the query controller schedules and runs normalized queries against each data sources independently and securely. In embodiments, the aggregator collects and merges the aggregates of the results into a single analysis. In embodiments, the query aggregation system communicates to various data sources including enterprise data silo(s) and personal data silo(s) to send queries and receive query results. In embodiments, the query sent to each data source may be specialized or tailored for the specific requirement of the data source.

Abstract: A privileged account management system can detect when credentials used to access one or more servers have been shared or otherwise compromised. This detection can occur through analysis of simultaneous actions that are performed via multiple sessions associated with the same administrator. When two or more sessions associated with the same administrator are opened, the interactions performed over each of the sessions can be monitored to identify whether such interactions could be performed by a single administrator. If it is determined that the interactions over the multiple sessions could not reasonably be performed by a single administrator, various actions can be taken to address the possible breach to the security of the one or more servers.

Abstract: The present disclosure provides for information handling systems and methods to configure and manage any number of heterogeneous devices. In various embodiments, a shared device configuration is simultaneously applied to a selected group of otherwise incompatible heterogeneous devices that may use different communication protocols and operating systems. Certain embodiments create and maintain a database of configuration and operational information that is accessible across platforms. A group device configuration may be automatically applied to all devices in the selected group via a batch command. Some embodiments allow independent heterogeneous devices that have similar functionality to have different device configuration settings.

Abstract: Embodiments of the present disclosure include systems and methods for providing query service of secured contents. A data collection service collects data and security context associated with the data from a data source and stores the data with the security attributes in a datastore, where the security attributes are derived from the security context and used to determine access to the data so that access to the data is consistent with the security context. Upon receiving a query and a user context of a requester making the query of the datastore, a set of query results is obtained. Based on the user context and security attributes, it is determined whether the requestor has a proper right to access the query results. If the requestor has a proper right to access the query results, access to the query results is granted.

Abstract: Systems and techniques for managing alert profiles, including creating the alert profiles and deactivating the alert profiles, are described. Auditing software executing on a central server may receive an event log from a software agent. The event log may identify activities associated with a network element in a computer system. The auditing software may include a classifier trained using machine learning. The auditing software may determine that the event log is indicative of an interesting activity, such as malicious activity. The auditing software may create an alert profile. The auditing software may assign a severity to the alert profile. The auditing software may determine whether the alert profile is relevant. The auditing software may deactivate the alert profile based on determining that the alert profile is not relevant.

Abstract: Systems and techniques for identifying potential problems associated with deploying a software package in a computing system are described. The software package may include multiple components that are installed in various locations in the computing system. Multiple agents that perform mock activities emulating the activities of the multiple components may be deployed in the computing system. Activity data may be gathered when the multiple agents are performing the mock activities and used to identify potential problems.