Abstract: An example system includes persistent storage and a discovery application configured to perform operations including obtaining a uniform resource locator (URL) that addresses a function of an application programming interface (API) provided by a remote computing system of remote computing systems that provide computing resources. The function returns attributes of computing resources specified by the URL. The operations additionally include generating (i) a system-specific portion of a request that invokes execution of the function and (ii) a system-invariant portion of the request. The system-specific portion adheres to first rules adopted by the remote computing system for interacting with the API. The system-invariant portion adheres to second rules adopted by each of the remote computing systems for interacting with respective APIs thereof.

Abstract: A system may contain a computational instance including persistent storage that maintains a discovery pattern and credentials for a cloud-based service, where the cloud-based service provides a remote computing infrastructure. The system may also contain one or more processors configured to: remotely access, using the credentials, the cloud-based service; execute the discovery pattern to obtain copies of tags configured in the cloud-based service, where the tags each include key fields, value fields, and resource identifier fields, and where the resource identifier fields uniquely specify respective computational resources of the cloud-based service; associate the tags that were discovered to configuration item representations of the respective computational resources; and store, in the persistent storage, the tags and their associations to the configuration item representations.

Abstract: A system includes persistent storage configured to store, a mapping of computing resources provided by a remote computing system to a managed network. The system also includes an application that obtains instructions to modify a computing resource provided by the remote computing system and, based on the instructions, generates and transmits, to the remote computing system, a request to modify the computing resource. The application receives, from the remote computing system, a response indicating a modification to the computing resource and selects a discovery pattern configured to verify the modification by obtaining attributes associated therewith. The application obtains, from the remote computing system, the attributes by executing the discovery pattern and determines, based on the attributes, that the modification has been completed according to the instructions.

Abstract: A system may include a database, where a managed network includes a computing cluster that provides networking, storage, and virtualization services distributed across a plurality of computing devices, where each computing device can execute one or more respective software applications and comprises: (i) a respective controller, and (ii) a respective storage device, and where the storage devices of the plurality of computing devices collectively form a storage pool.

Abstract: A system includes persistent storage and an application that obtains a service identifier associated with a managed network. The service identifier allows access to a remote computing system that provides computing resources on behalf of the managed network. The application also identifies a geographic region that contains the computing resources. The application additionally identifies, within the geographic region, virtual computing devices allocated to the managed network and attributes thereof. The application further identifies, based on the attributes, (i) load balancers configured to distribute network traffic among the virtual computing devices and (ii) storage volumes used by the virtual computing devices.

Abstract: A system includes a configuration management database (CMDB). Application programming interface (API) proxies associated with a managed network provide access to resources. The system also includes a discovery application configured to perform operations including determining a proxy uniform resource locator (URL) used to provide access to a particular resource of the resources through an API proxy of the API proxies and obtaining, from a computing device associated with the API proxy, an assignment of proxy URLs to corresponding target URLs by the API proxy. Each target URL of the corresponding target URLs address a respective resource of the resources. The proxy URLs are used to provide access to the resources through the API proxy. The operations also include selecting, from the assignment, a target URL assigned to the proxy URL, generating a mapping between the proxy URL and the target URL, and storing the mapping in the CMDB.

Abstract: Systems, methods, and media are used to identify phishing attacks. A notification of a phishing attempt with a parameter associated with a recipient of the phishing attempt is received at a security management node. In response, an indication of the phishing attempt is presented in a phishing attempt search interface. The phishing attempt search interface may be used to search for additional recipients, identify which recipients have been successfully targeted, and provide a summary of the recipients. Using this information, appropriate security measures in response to the phishing attempt for the recipients may be performed.

Abstract: An example system includes persistent storage and a discovery application configured to perform operations including obtaining a uniform resource locator (URL) that addresses a function of an application programming interface (API) provided by a remote computing system of remote computing systems that provide computing resources. The function returns attributes of computing resources specified by the URL. The operations additionally include generating (i) a system-specific portion of a request that invokes execution of the function and (ii) a system-invariant portion of the request. The system-specific portion adheres to first rules adopted by the remote computing system for interacting with the API. The system-invariant portion adheres to second rules adopted by each of the remote computing systems for interacting with respective APIs thereof.

Abstract: A computing system is disposed within a computational instance of a remote network management platform associated with a managed network. The computing system (i) performs a discovery process that identifies attributes of computing devices and software applications disposed within the managed network; (ii) generates a list of keywords based on the identified attributes as stored, including a particular keyword associated with a first computing device or a first software application of those disposed within the managed network; (iii) searches for the particular keyword in one or more files from the managed network; (iv) determines that the particular keyword is included in a file associated with a second computing device or a second software application of those disposed within the managed network; and (v) defines an operational mapping between: (a) the first computing device or the first software application and (b) the second computing device or the second software application.

Abstract: A system may include a database, where a managed network includes a computing cluster that provides networking, storage, and virtualization services distributed across a plurality of computing devices, where each computing device can execute one or more respective software applications and comprises: (i) a respective controller, and (ii) a respective storage device, and where the storage devices of the plurality of computing devices collectively form a storage pool.

Abstract: A computing system includes a database and a discovery application. The discovery application obtains credentials for accessing a server hosting a software bus application which connects a plurality of applications within a managed network. The discovery application selects, based on a pattern corresponding to the software bus application, one or more files to access, transmits, to the server, instructions to access the one or more files, and receives therefrom data identifying a plurality of attributes of the software bus application. Based on this data, the discovery application transmits, to the server, instructions to identify communicative connections established between the plurality of software applications by way of the software bus application and receives therefrom data identifying the communicative connections.

Abstract: An example embodiment relates to discovering computing devices in a managed network that are involved in blockchain-based mining.

Abstract: An example system includes a database disposed within a remote network management platform that manages a managed network, where one or more worker nodes are configured to execute containerized software applications on behalf of the managed network. The system also includes a computing device configured to request and receive configuration data identifying the applications; access traffic data generated by packet detection modules disposed amongst the one or more worker nodes and configured to (i) monitor network traffic between the applications and (ii) generate and store the traffic data which is indicative of the monitored network traffic; parse the traffic data for one or more patterns indicative of communicative relationships between the applications; based on the one or more patterns being present in the traffic data, generate mappings between the applications that have communicative relationships therebetween; and store, in the database, the configuration data and the mappings.