Abstract: A method of incident root cause analysis in an information technology (IT) system, wherein upon occurrence of an incident collecting changes to configuration items and/or system parameters on computer stations during a predetermined time prior to the incident, calculating a change lifetime for each of the collected changes, comparing the change lifetime to the time of occurrence of the incident to determine if the lifetime of the change is still valid, marking a probability value of zero for occurrence of the incident as a result of the change for changes with an expired lifetime value at the time of the incident, otherwise estimating a risk profile and calculating from it a probability value for occurrence of the incident as a result of the change, sorting the changes according to the probability value, and selecting a predetermined number of changes having the highest probability values for root cause analysis.

Abstract: A method of clustering changes to configuration items in an information technology (IT) system, including collecting changed configuration items executed on computer stations connected in a network implementing the information technology system, storing the collected configuration items in a database, analyzing contextual information related to the configuration items to identify clusters having similar characteristics, clustering the configuration items based on the identified clusters having similar characteristics, and assigning a descriptor to each cluster to identify it as an IT action.

Abstract: A method of incident root cause analysis in an information technology (IT) system, wherein upon occurrence of an incident collecting changes to configuration items and/or system parameters on computer stations during a predetermined time prior to the incident, calculating a change lifetime for each of the collected changes, comparing the change lifetime to the time of occurrence of the incident to determine if the lifetime of the change is still valid, marking a probability value of zero for occurrence of the incident as a result of the change for changes with an expired lifetime value at the time of the incident, otherwise estimating a risk profile and calculating from it a probability value for occurrence of the incident as a result of the change, sorting the changes according to the probability value, and selecting a predetermined number of changes having the highest probability values for root cause analysis.

Abstract: A method of clustering changes to configuration items in an information technology (IT) system, including collecting changed configuration items executed on computer stations connected in a network implementing the information technology system, storing the collected configuration items in a database, analyzing contextual information related to the configuration items to identify clusters having similar characteristics, clustering the configuration items based on the identified clusters having similar characteristics, and assigning a descriptor to each cluster to identify it as an IT action.

Abstract: A method for analyzing and prioritizing changes to configuration parameters of applications in an information technology system, including collecting configuration parameters of applications executed on computer stations in a network, storing the collected configuration parameters in a database, comparing the configuration parameters of an application from a specific station with configuration parameters of the application at different stations, determining differences in the configuration parameters by the comparing, analyzing the determined differences according to a set of analysis dimensions that represent rules for evaluating the differences, assigning a score representing the level of conformity of the differences to each of the analysis dimensions, defining a context for reviewing the differences, assigning a weight to each analysis dimension representing the importance of the analysis dimension, adjusting the weights assigned to the analysis dimension based on the context, calculating a total risk for

Abstract: A method for analyzing and prioritizing changes to configuration parameters of applications in an information technology system, including collecting configuration parameters of applications executed on computer stations in a network, storing the collected configuration parameters in a database, comparing the configuration parameters of an application from a specific station with configuration parameters of the application at different stations, determining differences in the configuration parameters by the comparing, analyzing the determined differences according to a set of analysis dimensions that represent rules for evaluating the differences, assigning a score representing the level of conformity of the differences to each of the analysis dimensions, defining a context for reviewing the differences, assigning a weight to each analysis dimension representing the importance of the analysis dimension, adjusting the weights assigned to the analysis dimension based on the context, calculating a total risk for

Abstract: A system and a method for characterizing an application the method including one or more of monitoring installation of an application and recording information relating to one or more file system, registry and database resources created or modified during installation of the application, monitoring an application run and recording information relating to one or more file system, registry, database and network resources accessed during run of the application and manually entering information relating to one or more file system, registry, database and network resources employed by the application and filtering the information to provide filtered information and classifying the filtered information to obtain classified information.