Abstract: Data investigations are performed by querying a plurality of data sources. A system receives an investigation input and queries a plurality of data sources in accordance with the received input. The system receives, in response to the querying, response data from the plurality of data sources, and generates and stores a data structure representing relationships between the first investigation input and the first response data. The data structure may be in the form of a knowledge graph. The system may generate and display a visualization of the data structure. The system may generate and store a record of investigation steps used to generate the data structure, such that the investigation steps may be applied in future instances, for example using different inputs, to generate new data structures.

Abstract: The present disclosure relates to capturing the routing topology of a network (e.g., the Internet covering the entire IPv4 address space). An exemplary method comprises: obtaining a first bit array indicative of a plurality of target IP addresses; assigning a first subset of the plurality of target IP addresses to a first source device; assigning a second subset of the plurality of target IP addresses to a second source device; causing the first source device to transmit a first plurality of probing packets to the first subset of the plurality of target IP addresses and receive a first plurality of returned packets, causing the second source device to transmit a second plurality of probing packets to the second subset of the plurality of target IP addresses and receive a second plurality of returned packets, and generating a data structure representing a routing topology of the network.

Abstract: Data investigations are performed by querying a plurality of data sources. A system receives an investigation input and queries a plurality of data sources in accordance with the received input. The system receives, in response to the querying, response data from the plurality of data sources, and generates and stores a data structure representing relationships between the first investigation input and the first response data. The data structure may be in the form of a knowledge graph. The system may generate and display a visualization of the data structure. The system may generate and store a record of investigation steps used to generate the data structure, such that the investigation steps may be applied in future instances, for example using different inputs, to generate new data structures.

Abstract: The present disclosure relates to capturing the routing topology of a network (e.g., the Internet covering the entire IPv4 address space). An exemplary method comprises: obtaining a first bit array indicative of a plurality of target IP addresses; assigning a first subset of the plurality of target IP addresses to a first source device; assigning a second subset of the plurality of target IP addresses to a second source device; causing the first source device to transmit a first plurality of probing packets to the first subset of the plurality of target IP addresses and receive a first plurality of returned packets, causing the second source device to transmit a second plurality of probing packets to the second subset of the plurality of target IP addresses and receive a second plurality of returned packets, and generating a data structure representing a routing topology of the network.