Abstract: Host end points of a network connection can generate unique connection identifiers that are the same for both ends of the network connection. Both end points of the connection can send the connection identifiers in association with host end point metadata about the connection to a central location, where the metadata of both end points of a connection can be identified by the unique connection identifier.

Abstract: File access in a network environment by detecting when files have been accessed at a computers in the network environment, and then generating unique content identifiers of the file content. The content identifier along with access metadata can be transmitted to and stored at a central location. The stored information can be used to track file content movement in the network environment.

Abstract: A file fingerprint may be provided as a composite of multiple hashes of different portions of the file. The composite hash allows the fingerprinting process to be interrupted while still providing information about a likely hood of two files being identical.

Abstract: A file fingerprint may be provided as a composite of multiple hashes of different portions of the file. The composite hash allows the fingerprinting process to be interrupted while still providing information about a likely hood of two files being identical.

Abstract: Host end points of a network connection can generate unique connection identifiers that are the same for both ends of the network connection. Both end points of the connection can send the connection identifiers in association with host end point metadata about the connection to a central location, where the metadata of both end points of a connection can be identified by the unique connection identifier.

Abstract: File access in a network environment by detecting when files have been accessed at a computers in the network environment, and then generating unique content identifiers of the file content. The content identifier along with access metadata can be transmitted to and stored at a central location. The stored information can be used to track file content movement in the network environment.

Abstract: Computer security protection of virtual machines is remotely managed by a security manager that communicates with a security agent in each of the virtual machines. The security manager sends a sequence marker to a virtual machine, and expects to receive the sequence marker back from the virtual machine. When the security manager detects that a virtual machine sends a sequence marker that is the same as a previously received sequence marker, the security manager detects that the virtual machine is a clone or a rollback of another virtual machine. In response, the security manager provisions computer security in the virtual machine.