Abstract: The endpoint agent detects a cyber threat on an end-point computing device. The endpoint agent on the computing device has a communications module that communicates with a cyber defense appliance. A collections module monitors and collects pattern of life data on processes executing on the end-point computing-device and users of the end-point computing-device. The communications module sends the pattern of life data to the cyber defense appliance installed on a network. The cyber defense appliance at least contains one or more machine-learning models to analyze the pattern of life data for each endpoint agent connected to that cyber defense appliance. The endpoint agent and the cyber defense appliance may trigger one or more actions to be autonomously taken to contain a detected cyber threat when a cyber-threat risk score is indicative of a likelihood of a cyber-threat is equal to or above an actionable threshold.

Abstract: In an embodiment, an apparatus is described. The apparatus comprises an appliance extension configured to perform functions with i) a monitoring module configured to monitor metrics and receive alerts regarding potential cyber threats on a system including an email system, ii) an investigative module configured to retrieve the metrics and alerts, and iii) a remote response module configured observe the metrics and alerts and send one or more control signals to an autonomous response module to take one or more actions to counter one or more detected cyber threats on the system remotely from the appliance extension.

Abstract: The endpoint agent detects a cyber threat on an end-point computing device. The endpoint agent on the computing device has a communications module that communicates with a cyber defense appliance. A collections module monitors and collects pattern of life data on processes executing on the end-point computing-device and users of the end-point computing-device. The communications module sends the pattern of life data to the cyber defense appliance installed on a network. The cyber defense appliance at least contains one or more machine-learning models to analyze the pattern of life data for each endpoint agent connected to that cyber defense appliance. The endpoint agent and the cyber defense appliance may trigger one or more actions to be autonomously taken to contain a detected cyber threat when a cyber-threat risk score is indicative of a likelihood of a cyber-threat is equal to or above an actionable threshold.

Abstract: The endpoint agent detects a cyber threat on an end-point computing device. The endpoint agent on the computing device has a communications module that communicates with a cyber defense appliance. A collections module monitors and collects pattern of life data on processes executing on the end-point computing-device and users of the end-point computing-device. The communications module sends the pattern of life data to the cyber defense appliance installed on a network. The cyber defense appliance at least contains one or more machine-learning models to analyze the pattern of life data for each endpoint agent connected to that cyber defense appliance. The endpoint agent and the cyber defense appliance may trigger one or more actions to be autonomously taken to contain a detected cyber threat when a cyber-threat risk score is indicative of a likelihood of a cyber-threat is equal to or above an actionable threshold.

Abstract: Techniques for electronic medical record (EMR) integration are described. A middleware application may receive a command from a third-party application via an electronic network. The command may conform to a unified data format specified by a unified data model. The command may include a request to retrieve data from or write data to an EMR system. The middleware application may convert, using a mapping registrar, the command into a data format compatible with the EMR system. The middleware application may transmit, via another electronic network, the converted command to the EMR system. The middleware application may receive a response from the EMR system. The middleware application may convert, using a mapping registrar, the response into a result that may conform to the unified data format. The middleware application may transmit the converted result to the third-party application.

Abstract: The appliance extension is designed and constructed to be a secure extension of the threat visualizer user interface of the cyber security appliance installed in the system with a limited set of functions including monitoring, investigating, and taking actions to counter the detected cyber threat, all of which an operator can securely take from the appliance extension; rather than, needing to log into the cyber security appliance and investigate potential cyber threats at a location where the cyber security appliance is installed in the system.

Abstract: The appliance extension is designed and constructed to be a secure extension of the threat visualizer user interface of the cyber security appliance installed in the system with a limited set of functions including monitoring, investigating, and taking actions to counter the detected cyber threat, all of which an operator can securely take from the appliance extension; rather than, needing to log into the cyber security appliance and investigate potential cyber threats at a location where the cyber security appliance is installed in the system.

Abstract: The endpoint agent detects a cyber threat on an end-point computing device. The endpoint agent on the computing device has a communications module that communicates with a cyber defense appliance. A collections module monitors and collects pattern of life data on processes executing on the end-point computing-device and users of the end-point computing-device. The communications module sends the pattern of life data to the cyber defense appliance installed on a network. The cyber defense appliance at least contains one or more machine-learning models to analyze the pattern of life data for each endpoint agent connected to that cyber defense appliance. The endpoint agent and the cyber defense appliance may trigger one or more actions to be autonomously taken to contain a detected cyber threat when a cyber-threat risk score is indicative of a likelihood of a cyber-threat is equal to or above an actionable threshold.

Abstract: Techniques for electronic medical record (EMR) integration are described. A middleware application may receive a command from a third-party application via an electronic network. The command may conform to a unified data format specified by a unified data model. The command may include a request to retrieve data from or write data to an EMR system. The middleware application may convert, using a mapping registrar, the command into a data format compatible with the EMR system. The middleware application may transmit, via another electronic network, the converted command to the EMR system. The middleware application may receive a response from the EMR system. The middleware application may convert, using a mapping registrar, the response into a result that may conform to the unified data format. The middleware application may transmit the converted result to the third-party application.

Abstract: The disclosure relates to a monovalent polypeptide domain which specifically binds CD28, as well as to an antagonist of CD28, where the antagonist comprises a monovalent polypeptide domain which specifically binds CD28. This disclosure encompasses monovalent polypeptide domains comprising an antibody single variable domain that monovalently binds CD28. An antibody single variable domain that is monovalent for binding of CD28 can inhibit CD28 activity. In one aspect, a monovalent anti-CD28 antibody single variable domain consists of or comprises an antibody single variable domain that specifically binds and antagonizes the activity of CD28, in an aspect, without substantially agonizing CD28 activity. In another aspect, the monovalent anti-CD28 antibody single variable domain is a human antibody single variable domain.

Abstract: The disclosure relates to a monovalent polypeptide domain which specifically binds CD28, as well as to an antagonist of CD28, where the antagonist comprises a monovalent polypeptide domain which specifically binds CD28. This disclosure encompasses monovalent polypeptide domains comprising an antibody single variable domain that monovalently binds CD28. An antibody single variable domain that is monovalent for binding of CD28 can inhibit CD28 activity. In one aspect, a monovalent anti-CD28 antibody single variable domain consists of or comprises an antibody single variable domain that specifically binds and antagonizes the activity of CD28, in an aspect, without substantially agonizing CD28 activity. In another aspect, the monovalent anti-CD28 antibody single variable domain is a human antibody single variable domain.