Abstract: A cloud storage server accesses a plurality of server-stored files of a cloud storage account of a client device. The cloud storage server determines that one or more server-stored files from the plurality of server-stored files are affected by a malware activity. The cloud storage server generates a graphical user interface that includes a detection notification and a confirmation request, the detection notification indicating a detected presence of malware in the one or more server-stored files and metadata corresponding to the one or more server-stored files, the confirmation request indicating a request for the client device to confirm the detected presence of malware in the one or more server-stored files. A confirmation response is received from the client device. The confirmation response identifies at least one of the one or more server-stored files and confirming the presence of malware activity in the identified server-stored files.

Abstract: A cloud storage server accesses a plurality of server-stored files of a cloud storage account of a client device and determines that one or more compromised server-stored files from the plurality of server-stored files are affected by a malware activity. The cloud storage server determines a plurality of recovery options based on an identification of the one or more compromised server-stored files and the time at which changes to the one or more compromised server-stored files became affected by the malware activity. The plurality of recovery options comprises a suggested restore point identifying a restore time to which changes to the one or more compromised server-stored files are reverted. The cloud storage server transmits a recovery notification that indicates the plurality of recovery options to the client device.

Abstract: Techniques directed to applying metadata to content items are described herein. The techniques may include displaying a graphical element associated with a metadata attribute(s) and displaying a visual representation for a content item(s). The graphical element may be associated with a group of content items that have a common metadata attribute. In some instances, the graphical element may be dragged and dropped onto the visual representation to associate the content item(s) with the metadata attribute(s). In other instances, the visual representation may be dragged and dropped on the graphical element to associate the content item(s) with the metadata attribute(s).

Abstract: A cloud storage server receives a request from a client device to store a file. The cloud storage server stores the file in a storage device of the cloud storage server. The cloud storage server determines features of the server-stored file and detects ransomware activity based on the features of the server-stored file. The cloud storage server sends a notification of the ransomware activity to the client device. The client device confirms the presence or an absence of the ransomware activity in the server-stored file. The cloud storage server updates an operation of the detection of the ransomware activity based on the received ransomware confirmation.

Abstract: A histogram slider application accesses, from a data storage of a machine, file activities performed on the machine as a function of time. The histogram slider application determines points in time at which a level of file activities exceeds an activity level threshold that is based on historical levels of file activities on the machine. The histogram slider application generates a graphical user interface comprising a histogram indicative of the file activities over time and the determined points in time, a slider configured to move along a timeline that is parallel to the histogram, and a list of file activities corresponding to a first position of the slider on the timeline, the first position indicating a first time on the histogram.

Abstract: A histogram slider application accesses, from a data storage of a machine, file activities performed on the machine as a function of time. The histogram slider application determines points in time at which a level of file activities exceeds an activity level threshold that is based on historical levels of file activities on the machine. The histogram slider application generates a graphical user interface comprising a histogram indicative of the file activities over time and the determined points in time, a slider configured to move along a timeline that is parallel to the histogram, and a list of file activities corresponding to a first position of the slider on the timeline, the first position indicating a first time on the histogram.

Abstract: A cloud storage server receives a request from a client device to store a tile. The cloud storage server stores the file in a storage device of the cloud storage server. The cloud storage server determines features of the server-stored file and detects ransomware activity based on the features of the server-stored file. The cloud storage server sends a notification of the ransomware activity to the client device. The client device confirms the presence or an absence of the ransomware activity in the server-stored file. The cloud storage server updates an operation of the detection of the ransomware activity based on the received ransomware confirmation.

Abstract: A cloud storage server accesses a plurality of server-stored files of a cloud storage account of a client device. The cloud storage server determines that one or more server-stored files from the plurality of server-stored files are affected by a malware activity. The cloud storage server generates a graphical user interface that includes a detection notification and a confirmation request, the detection notification indicating a detected presence of malware in the one or more server-stored files and metadata corresponding to the one or more server-stored files, the confirmation request indicating a request for the client device to confirm the detected presence of malware in the one or more server-stored files. A confirmation response is received from the client device. The confirmation response identifies at least one of the one or more server-stored files and confirming the presence of malware activity in the identified server-stored files.

Abstract: A cloud storage server accesses a plurality of server-stored files of a cloud storage account of a client device and determines that one or more compromised server-stored files from the plurality of server-stored files are affected by a malware activity. The cloud storage server determines a plurality of recovery options based on an identification of the one or more compromised server-stored files and the time at which changes to the one or more compromised server-stored files became affected by the malware activity. The plurality of recovery options comprises a suggested restore point identifying a restore time to which changes to the one or more compromised server-stored files are reverted. The cloud storage server transmits a recovery notification that indicates the plurality of recovery options to the client device.

Abstract: Techniques are described herein that are capable of using relevant objects to add content to a collaborative repository. The relevant objects are selected from URI-addressable objects based on each relevant object satisfying one or more relevance criteria. The relevant objects are recommended via a user interface. A determination is made that a specified relevant object is selected from the relevant objects. In one example, the content may be added to (e.g., created in) the collaborative repository based on the specified relevant object. In another example, the specified relevant object may be used to represent a new object type in a new content menu. For instance, the new object type may be selectable to cause an object of the new object type to be created in the collaborative repository.

Abstract: Among other things, embodiments of the present disclosure help improve the functionality of electronic document management software and systems by generating customized filter options to enhance the search criteria available to users in finding documents in the document management system.

Abstract: Metered network synchronization techniques are described. A current network connection of a computing device is checked as to whether the current network connection has been identified as a metered network. Access by a synchronization engine of the computing device to communicate via the current network connection to synchronize data of the computing device with another computing device is managed based at least in part on a setting associated with the metered network.

Abstract: Metered network synchronization techniques are described. A current network connection of a computing device is checked as to whether the current network connection has been identified as a metered network. Access by a synchronization engine of the computing device to communicate via the current network connection to synchronize data of the computing device with another computing device is managed based at least in part on a setting associated with the metered network.

Abstract: A user of a device has an account with a service that stores copies of common data that is automatically made available to any of the user's devices and also stores copies of device-specific data that is available to the user on particular user-selected devices but is not automatically made available to all of the user's devices. A set of backed up devices can be displayed to the user of a particular device with various information describing the devices to facilitate user selection of a device, such as a visual representation of the type of the device that was backed up, a visual representation of a desktop or start screen display of the device that was backed up, and so forth. The user can select one of the displayed devices, and in response have the backed up device-specific data for the selected device copied to the particular device.

Abstract: Techniques are described herein that are capable of using relevant objects to add content to a collaborative repository. The relevant objects are selected from URI-addressable objects based on each relevant object satisfying one or more relevance criteria. The relevant objects are recommended via a user interface. A determination is made that a specified relevant object is selected from the relevant objects. In one example, the content may be added to (e.g., created in) the collaborative repository based on the specified relevant object. In another example, the specified relevant object may be used to represent a new object type in a new content menu. For instance, the new object type may be selectable to cause an object of the new object type to be created in the collaborative repository.

Abstract: Techniques directed to applying metadata to content items are described herein. The techniques may include displaying a graphical element associated with a metadata attribute(s) and displaying a visual representation for a content item(s). The graphical element may be associated with a group of content items that have a common metadata attribute. In some instances, the graphical element may be dragged and dropped onto the visual representation to associate the content item(s) with the metadata attribute(s). In other instances, the visual representation may be dragged and dropped on the graphical element to associate the content item(s) with the metadata attribute(s).

Abstract: An application provides a search box that is configured to enable a user to enter searchable text. The application provides a quick pick search provider menu that is configured to include different sections that provide suggestions as text is entered into the search box. At least some of the suggestions are locally maintained, and at least some other of the suggestions are received from one or more remote search providers. In some embodiments, the application can comprise a web browser.

Abstract: Techniques for operation chart rescaling are described. In at least some embodiments, an operations chart is provided that tracks various parameters for an operation. The operations chart can include visual indicia of operation parameters, such as an operation value indicator that indicates a current operation value. A progress indicator can also be included that provides a visual indication of operation progress. In response to a change in an operation value for the operations chart (e.g., a change in data rate), the operations chart can be rescaled to visually reflect the change in operation value. In at least some implementations, techniques are employed to smooth visual movement of chart elements during a rescaling operation.

Abstract: Various embodiments utilize structured data contained within a resource, such as a web page, to enable a user to define collections of data. Individual constituent parts of a collection or “links” are collected within a collection. In one or more embodiments, a full page viewing experience can be provided which enables users to not only view more details for a given link, but to view multiple different links at a time. Other viewing options and collection interactions are provided.

Abstract: Techniques for operation chart rescaling are described. In at least some embodiments, an operations chart is provided that tracks various parameters for an operation. The operations chart can include visual indicia of operation parameters, such as an operation value indicator that indicates a current operation value. A progress indicator can also be included that provides a visual indication of operation progress. In response to a change in an operation value for the operations chart (e.g., a change in data rate), the operations chart can be rescaled to visually reflect the change in operation value. In at least some implementations, techniques are employed to smooth visual movement of chart elements during a rescaling operation.