Abstract: Disclosed are various approaches for workflow service application searching. In some aspects, a search query is entered through a search element of a workflow application on a client device. A request is transmitted from a workflow application to a workflow service, to search within an application based on the search query. Application content corresponding to the search query and the application is received from the workflow service. A search result is provided based on the application content and without opening the application on the client device.

Abstract: Systems and methods are described for extracting and populating content from an email link. In an example, a machine learning (“ML”) model can be trained based on user interactions with emails. When an email is received for the user, the ML model can be applied to score the email. An application can extract a link in the email. The application can retrieve a web page with the link and store it locally. The application can create a card for the email that includes the link and insert the card into a graphical user interface (“GUI”). A user can access the GUI and select the card. The web page can be retrieved from the local storage and displayed in the GUI.

Abstract: Disclosed are various examples for audio data leak prevention using user and device contexts. In some examples, a voice assistant device can be connected to a remote service that provides enterprise data to be audibly emitted by the voice assistant device. In response to a request for the enterprise data being received from the voice assistant device, an audio signal can be generated that audibly broadcasts the enterprise data. The audio signal can be generated to audibly redact at least a portion of the enterprise data based at least in part on a mode of operation of the voice assistant device. The voice assistant device can be directed to emit the enterprise data through a playback of the audio signal.

Abstract: Disclosed are various embodiments for implementing a key escrow system without disclosure of a client's encryption key to third parties. An encryption key is split into a plurality of key segments pursuant to a shared secret protocol. A plurality of peer client devices are then identified. Each peer client device in the plurality of peer client devices is then verified and the respective one of the plurality of key segments are sent to a respective one of the plurality of peer client devices. A response is then received from each respective one of the plurality of peer client devices, the response confirming receipt of the respective one of the plurality of key segments. A list identifying the plurality of peer client devices is finally provided to a key escrow service, the list comprising key-value pairs that identify each respective one of the plurality of peer client devices and the respective one of the plurality of key segments.

Abstract: Disclosed are various embodiments for managing voice-driven application. In one embodiment, among others, a system includes a computing device and program instructions. The program instructions can cause the computing device to initiate a management session between a voice application service and a management service based on receiving a first request from the voice application service. The program instructions can cause the computing device to initiate an application session between a voice-driven application and the management service based at least in part on a second request received from the voice application service. The program instructions can cause the computing device to enforce a compliance policy on a data request for the voice-driven application. The data response can be transmitted to the voice application. The voice application service can provide the data response to the client device for playback.

Abstract: Disclosed are various approaches for authenticating a user through a voice assistant device and creating an association between the device and a user account. The request is associated with a network or federated service. A user account can be implicitly authenticated based on proximity of a client device to the voice assistant device. An association between the user account and the voice assistant device can then be created.

Abstract: Disclosed are various approaches for workflow service application stating. In some aspects, an application content request is transmitted to a workflow service. The application content request can request updated states from a network service that acts as a back end for the application. The application content can be provided to the client device or other installed applications, without having opened the application on a client device.

Abstract: Systems and methods can allow for secure cross-device sharing of transient data using direct transient data sharing (“DTDS”). A source destination can share data using local DTDS with an agent on a first device. The agent can send the data to a hub server that runs a security control process and data formatting process. The hub server can determine risk scores for the source and destination devices and allow the sharing to occur if a safety threshold is met. Then an agent on the destination device can receive the transient data and use local DTDS to send the data to a destination application.

Abstract: Disclosed are various approaches for automating the detection and identification of anomalous devices in a management service. Device check-ins are received by a management service and housed in a data store. The quantity of device check-ins over various time periods can be analyzed using various approaches to identify anomalous devices.

Abstract: Disclosed are various embodiments that relate to a system or a method for managing individual actions. In one example, among others, a system includes a client device that is configured to display a camera user interface for capturing an image and identify an action that stores the image captured in the memory. An image tag that describes the image is generated. The client device is configured to determine that the image has enterprise content based on the image tag and determine an enterprise policy to apply to the enterprise content. Text content from the image is extracted based on the enterprise policy. The client device is configured to display a user interface that includes the text content extracted from the image and transmit the text content of the image to an application based on the enterprise policy.

Abstract: Disclosed are various embodiments for managing voice-driven application. In one embodiment, among others, a system includes a computing device and program instructions. The program instructions can cause the computing device to initiate a management session between a voice application service and a management service based on receiving a first request from the voice application service. The program instructions can cause the computing device to initiate an application session between a voice-driven application and the management service based at least in part on a second request received from the voice application service. The program instructions can cause the computing device to enforce a compliance policy on a data request for the voice-driven application. The data response can be transmitted to the voice application. The voice application service can provide the data response to the client device for playback.

Abstract: Disclosed are various approaches for workflow service application stating. In some aspects, an application content request is transmitted to a workflow service. The application content request can request updated states from a network service that acts as a back end for the application. The application content can be provided to the client device or other installed applications, without having opened the application on a client device.

Abstract: Systems and methods can allow for secure cross-device sharing of transient data using direct transient data sharing (“DTDS”). A source destination can share data using local DTDS with an agent on a first device. The agent can send the data to a hub server that runs a security control process and data formatting process. The hub server can determine risk scores for the source and destination devices and allow the sharing to occur if a safety threshold is met. Then an agent on the destination device can receive the transient data and use local DTDS to send the data to a destination application.

Abstract: Disclosed are various approaches for automating the detection and identification of anomalous devices in a management service. Device check-ins are received by a management service and housed in a data store. The quantity of device check-ins over various time periods can be analyzed using various approaches to identify anomalous devices.

Abstract: Systems and methods are described for creating tasks for an action-based checklist. In an example, a checklist system can receive a body of text, such as text from an email, calendar invite, or document. The checklist system can extract words in the text body that correspond to a task description component of stored task templates. Based on the extracted words, the checklist system can identify an applicable task template. The checklist system can parse utterances in the text body and identify an entity value based on example utterances provided in the task template. The checklist system can insert the entity value into placeholders in the task template and generate task from the task template. The checklist system can add the task to a checklist that is provided to a user device.

Abstract: Disclosed are various approaches for workflow service application networking. In some aspects, a workflow creation user interface is provided to create a networking workflow with at least one networking action. A networking action is specified for a first application to utilize application content from a second application. The networking action is verified based on a response to a test action request transmitted to the workflow service. The networking action is transmitted from the workflow application to a workflow service to cause the first application to utilize the application content from the second application according to the networking action.

Abstract: Disclosed are various approaches for authenticating a user through a voice assistant device and creating an association between the device and a user account. The request is associated with a network or federated service. The user is prompted to use a client device, such as a smartphone, to facilitate an authentication flow. A soundwave is played through the client device that contains a secret key, which is then sent to a service that validates the secret key. An association between the user account and the voice assistant device can then be created so that access to third party services can occur.

Abstract: Disclosed are various approaches for assisting a user with skill or application discovery in a voice assistant device. By assisting the user in this way, avoiding the launching of malicious skills or applications can also be avoided. Additionally, restricting launching of applications to particular users or particular voice assistant devices can also be accomplished.

Abstract: Systems and methods are described for managing saved web pages on a user device. In an example, when a user bookmarks a web page at the user device, the user device can send the bookmark to a server. A service on the server can gather information about web page and associate a plurality of tags with the web page based on that information. The service can compare the web page's tags to tags of other previously bookmarked web pages to identify a possible matching web page. The service can perform a semantic similarity analysis between the two web pages to determine whether their similarity exceeds a threshold. Where the similarity does exceed the threshold, the service can notify the user device. The user device can notify the user and present options for the new bookmarked web page.

Abstract: Disclosed are various approaches for automating the detection and identification of security issues. A plurality of signals received from a plurality of security devices are analyzed to identify a predicted security incident, each of the plurality of signals indicating a potential security issue. A confidence score is then calculated for the predicted security incident. At least one compliance policy is then evaluated to determine whether to perform a remedial action specified in the compliance policy, wherein a determination to perform the remedial action is based at least in part on the confidence score. Finally, the remedial action is performed in response to an evaluation of the at least one compliance policy.