Abstract: A method includes: accessing objects, generated by a set of sources, representing attributes of assets, affiliated with a computer network, including a set of endpoint devices and a first application; partitioning the objects into object groups including a first object group representing the first application; aggregating objects in the first object group into a first user container representing the first application during the first time interval; and, in response to selection of the first application at an operator portal: generating a visualization representing a subset of endpoint devices, in the set of endpoint devices, on which the first application is installed during the first time interval based on a set of attributes, exhibited by the first application during the first time interval, contained in the first application container; and rendering the visualization at the operator interface.

Abstract: A method includes: storing attributes represented in objects, generated by sources during a time interval, into a container storing a set of attributes characterizing the first asset during the time interval; accessing a combination of attributes defining a first vulnerability in a set of vulnerabilities; identifying a subset of assets, including the first device, associated with the first vulnerability based on the combination of attributes represented in the set of attributes; calculating a vulnerability risk score, in a set of vulnerability risk scores, associated with the first vulnerability based on a quantity of devices in the subset of devices and a severity score assigned to the first vulnerability; selecting a subset of vulnerabilities, in the set of vulnerabilities, exhibiting highest vulnerability risk score; and generating a visualization indicating the subset of vulnerabilities, including the first vulnerability, and the quantity of devices associated with the first vulnerability.

Abstract: A method includes: accessing objects, generated by a set of sources, representing attributes of assets, affiliated with a computer network, including a set of endpoint devices and a first application; partitioning the objects into object groups including a first object group representing the first application; aggregating objects in the first object group into a first user container representing the first application during the first time interval; and, in response to selection of the first application at an operator portal: generating a visualization representing a subset of endpoint devices, in the set of endpoint devices, on which the first application is installed during the first time interval based on a set of attributes, exhibited by the first application during the first time interval, contained in the first application container; and rendering the visualization at the operator interface.

Abstract: A method includes: accessing a first set of attributes exhibited by a first asset during a time interval; identifying a first association between the first asset and a second asset based on the first set of attributes; accessing a second set of attributes exhibited by the second asset during the time interval; based on the first association between the first asset and the second asset, associating the first asset with a first subset of attributes in the second set of attributes; identifying an asset group, including the first asset, exhibiting a target combination of attributes during the time interval based on the target combination of attributes represented in the first set of attributes and the first subset of attributes, in the second set of attributes, associated with the first asset; and executing an action on assets in the asset group.

Abstract: A method includes: accessing objects, generated by a set of sources, representing attributes of assets, affiliated with a computer network, including a set of endpoint devices and a first application; partitioning the objects into object groups including a first object group representing the first application; aggregating objects in the first object group into a first user container representing the first application during the first time interval; and, in response to selection of the first application at an operator portal: generating a visualization representing a subset of endpoint devices, in the set of endpoint devices, on which the first application is installed during the first time interval based on a set of attributes, exhibited by the first application during the first time interval, contained in the first application container; and rendering the visualization at the operator interface.

Abstract: A method includes: accessing objects, generated by a set of sources, representing attributes of users affiliated with a computer network; partitioning the objects into object groups, each object group representing a particular user; for each object group, aggregating objects in the object group into a user container, in a set of user containers, representing a user during the first time interval; generating a manifest of users affiliated with the computer network during the first time interval based on the set of user containers; and, in response to selection of a first user in the manifest of users at an operator portal: generating a visualization representing a set of attributes exhibited by the first user during the first time interval.