Abstract: The present approach relates to systems and methods for facilitating run time predictions for cloud-computing automated tasks (e.g., automated tasks), and using the predicted run time to schedule resource locking. A predictive model may predict the automated task run time based on historical run time to completion, and the run time may be updated using machine learning. Resource lock schedules may be determined for a queue of automated tasks utilizing the resource based on the predicted run time for the various types of automated tasks. The predicted run time may be used to reserve a resource for the given duration, such that the resource is not available for use for another task.

Abstract: This disclosure provides techniques for pooling and searching network security events reported by multiple sources. As information representing a security event is received from one source, it is searched against a central or distributed database representing events reported from multiple, diverse sources (e.g., different client networks). Either the search or correlated results can be filtered and/or routed according at least one characteristic associated with the networks, for example, to limit correlation to events reported by what are presumed to be similarly situated networks. The disclosed techniques facilitate faster identification of high-relevancy security event information, and thereby help facilitate faster threat identification and mitigation. Various techniques can be implemented as standalone software (e.g., for use by a private network) or for a central pooling and/or query service. This disclosure also provides different examples of actions that can be taken in response to search results.

Abstract: A remote network management platform may include persistent storage containing: (i) data related to a managed network, and (ii) a persona of a user. The remote network management platform may also include a platform application associated with a web-based user interface and using a portion of the data. The remote network management platform may also include a recommendation engine with access to a set of rules or a machine learning (ML) model corresponding to the platform application. The recommendation engine may be configured to: (i) read, from the persistent storage, the portion of the data and the persona; (ii) apply, to the portion of the data and the persona, the set of rules or the ML model to generate one or more recommendations; and (iii) transmit, by way of the web-based user interface and to the user, representations of the one or more recommendations.

Abstract: Input data for an operating system command of an automation process is received. The operating system command is generated based on the received input data. The generated operating system command is parsed to identify one or more metrics. The identified one or more metrics are automatically evaluated to determine a security risk associated with the generated operating system command.

Abstract: A vulnerability-solution resolution (VSR) system is disclosed that is designed to create and maintain associations between vulnerabilities identified by third-party scanners (TPSs) and solutions, such as software patches received from third-party vendors. The VSR system includes a data scheme that enables information regarding vulnerabilities and solutions to be stored, and enables certain relationships to be automatically created between these vulnerabilities and solutions. In particular, the VSR system is designed to automatically form certain relationships between particular vulnerabilities and solutions based on solution supersedence and inheritance. Additionally, the VSR system includes a graphical user interface (GUI) that enables a user to exclude particular relationships from consideration when recommending solutions to resolve a vulnerability or when calculating metrics regarding the vulnerability.

Abstract: The present approach relates to event monitoring and management of an instance using a generated service map, allowing monitoring of CIs (e.g., applications) and connections that are currently active in a user's specific instance. A self-monitoring solution is generated for a user (e.g., via an application) that depicts status, configuration, and errors related to the user's instance. In certain implementations, the present techniques involve applying internal knowledge of the working of a user's instance and applications to perform the self-monitoring, and determine when an alert should be generated. Further, the present techniques may involve making a determination to provide a user with a self-help solution in addition or based on the self-monitoring of the user's instance.

Abstract: The present disclosure relates techniques for coordinating and synchronizing client-facing support services with the activities and responses from one or more technical teams assigned to address a client issue. In certain implementations, this may allow an agent or customer approach to use a single reference identifier (such as a case or matter number) to access information or updates from technical teams that do not typically employ such a number for their own tracking purposes. In this manner, relevant information to a client issue may be accessed from all involved technical teams at the agent level as well as allowing the technical teams themselves to readily see activity by other teams.

Abstract: A processor may receive a request with a column-oriented operation. The query request may be related to updates to a row-oriented database based on the query request previously performed on the row-oriented database. The processor may determine the amount of time for replicating the updates to a column-oriented database. If the amount of time for replicating the updates to the column-oriented database is greater than a threshold amount of time, then the processor may create a transient file with the updates. The transient file may be in a format that is recognized by the column-oriented database. The processor may query the column-oriented database based on the query request and the transient file.

Abstract: The present disclosure includes a feedback framework that receives feedback for a component of an information technology platform. The component includes the feedback framework, the information technology platform, a software application, a web browser, a client device, a client instance, or a virtual server. The feedback framework obtains context information associated with the feedback. The context information includes a system log, a screenshot, a web address of a web browser of the client device, version information, and/or the like. The feedback framework also determines an identity of the component by executing a handler. The feedback framework then determines a notification to send based on the identity of the component, and sends the notification with the feedback and the context information.

Abstract: An example embodiment may involve a software application executable on computing devices of a remote network management platform containing a computational instance associated with a managed network. A text string may be received, and characters of the string may be categorized among a plurality of symbol script families. A respective likelihood of the string corresponding to each family may be determined, and a respective probability of the string being in each language of each given family may also be determined. The respective probabilities for the languages of each given family may be weighted by the likelihoods of the given family, and then weighted sums of the probabilities for each language may be computed. The maximum of the weighted sums may correspond to the language of the text string. The respective probabilities may be determined according to hybrid N-gram and word language models for each family.

Abstract: A computer-generated data entry is received. The computer-generated data entry is segmented into a set of tokens. A plurality of different token permutation groupings are determined. Each of the different token permutation groupings includes a different subset of tokens from the set of tokens of the computer-generated data entry. For the computer-generated data entry, a corresponding token permutation grouping identifier is determined for each grouping of the plurality of different token permutation groupings. It is determined whether the computer-generated data entry belongs to any data entry cluster among a plurality of previously identified data entry clusters based on a search performed using the token permutation grouping identifiers of the computer-generated data entry.

Abstract: A mock server implementation for discovery applications is provided. A computing system includes a mock server, which receives a client request from a mock client on a discovery server. The client request corresponds to a user query associated with a discovery of resources on a remote computing system. The mock server determines a first response from a mock response dataset. The first response to the client request is determined based on the received client request. The mock response dataset includes a set of responses associated with a sequence of operations executed in the past for the discovery of resources on the remote computing system. The mock server transmits the determined first response to the mock client on the discovery server. The mock client receives the transmitted first response and sends the received first response to a discovery application interface on a user device.

Abstract: Visualizations are automatically generated based at least on a received identifier that identifies a report. One or more data sets and one or more style configurations are retrieved from a shared visualization library via a backend API based on the received identifier and passed to a router component. The router component includes a switch that renders a score component, which generates a score visualization, if the retrieved data sets include score data. If the data sets include time series data, or the score visualization also includes a time series graph, the router component renders a time series component that passes the data sets and the style configurations to a parser that parses the data sets and the style configurations and outputs one or more highcharts options objects. A highcharts component generates the time series visualizations and/or adds the time series graph to the score visualization based on the highcharts options objects.

Abstract: A computational instance of a remote network management platform may execute a remote access call for a license consolidation server. The remote access call may contain instructions for obtaining concurrent license usage statistics from the license consolidation server. In response to obtaining the concurrent license usage statistics, the computational instance may update a software configuration with the concurrent license usage statistics, where the software configuration contains a license rights allocation for the concurrent software application. Based on the concurrent license usage statistics and the license rights allocations, the computational instance may generate a representation of a graphical user interface that contains an overview pane indicating a utilization of the concurrent software application. Then the computational instance may transmit, to a client device, the representation of the graphical user interface.

Abstract: An embodiment may involve persistent storage including a parent filesystem and a pre-configured amount of free space within the parent filesystem that is dedicated for shared use. The embodiment may also involve one or more processors configured to, for each of a plurality of child filesystems: create a sparse file with an apparent size equivalent to the pre-configured amount of free space; create a virtual mapped device associated with the sparse file; establish one or more cryptographic keys for the virtual mapped device; create an encrypted virtual filesystem for the virtual mapped device and within the sparse file, wherein the encrypted virtual filesystem uses the cryptographic keys for application-transparent encryption and decryption of data stored by way of the encrypted virtual filesystem; and mount the encrypted virtual filesystem within the parent filesystem as one of the child filesystems.

Abstract: Creating and executing flow plans by performing at least the following: obtaining a run-time flow plan that comprises a trigger, a first operation, and a second operation, wherein the first operation precedes the second operation within the run-time flow plan and one or more input values of the second operation are linked to the first operation, determining whether one or more conditions of the trigger are met, execute the first operation based at least on the determination that the one or more conditions of the trigger are met, monitoring whether the second operation is ready for execution based at least on a determination that the one or more input values of a second action operation are ready, and executing the second action operation when the second action operation has been identified as ready for execution.

Abstract: A request is received from a client for data to render a modular contained widget component of an application user interface. Whether the requested data is cached at an intermediary server is determined at the intermediary server, wherein the requested data is based at least in part on one or more database records stored at a backend server. In response to a determination that the requested data is cached, the requested data is obtained from an identified cache instance that cached the requested data. The cached requested data is based at least in part on the one or more database records provided by the backend server to the intermediary server to maintain an updated version of the requested data at the identified cache instance. The requested data is provided to the client from the intermediary server.

Abstract: Examples of techniques for detecting and tracking virtual containers are disclosed. In one example implementation according to aspects of the present disclosure, a computer-implemented method includes detecting a virtual container. The method further includes collecting virtual container data for the virtual container. The method also includes associating, by a processing device, the virtual container to at least one of a plurality of images. Additionally, the method includes building, by the processing device, a container event database based on the virtual container data and the association of the virtual container to the at least one of the plurality of images, so as to enable tracking of software in the plurality of images and in live virtual containers.

Abstract: An agent automation system implements a virtual agent that is capable of learning new words, or new meanings for known words, based on exchanges between the virtual agent and a user in order to customize the vocabulary of the virtual agent to the needs of the user or users. The agent automation framework has access to a corpus of previous exchanges between the virtual agent and the user, such as one or more chat logs. New words and/or new meanings for known words are identified within the corpus and new word vectors are generated for these new words and/or new meanings for known words and added to refine a word vector distribution model. The refined word vector distribution model is then utilized by the agent automation system to interact with the user.