Abstract: A discovery application may obtain, from a remote storage system configured to host storage structures, first data that identifies relationships among the storage structures. The discovery application may generate, based on the first data, a mapping of the storage structures, store the mapping as one or more configuration items, and provide, to the remote storage system, instructions configured to cause the remote storage system to notify the discovery application of modification events associated with the storage structures. The discovery application may receive, from the remote storage system, a notification of a modification event associated with a particular storage structure of the storage structures and, in response, obtain, from the remote storage system, second data that identifies a modification to the particular storage structure. The discovery application may modify the mapping based on the second data and store the modified mapping by updating the one or more configuration items.

Abstract: The present disclosure is directed to a discovery process that enables discovery of database management systems (DBMSs) hosted by at least one client device of a client network. The disclosed discovery process involves a discovery server disposed on the client network accessing the client device hosting the DBMS to collect configuration item (CI) data on the configuration and operation of management, extraction, and replication processes of the DBMS. More specifically, this discovery process involves the discovery server requesting and receiving certain CI data from the management process of the DBMS, requesting and receiving certain CI data from an operating system (OS) of the client devices, as well as parsing and retrieving certain CI data from configuration and report files of the DBMS. Additionally, the disclosed discovery process is designed to be performed without being granted special or additional privileges within the DBMS itself.

Abstract: A system includes persistent storage and an application that obtains a service identifier associated with a managed network. The service identifier allows access to a remote computing system that provides computing resources on behalf of the managed network. The application also identifies a geographic region that contains the computing resources. The application additionally identifies, within the geographic region, virtual computing devices allocated to the managed network and attributes thereof. The application further identifies, based on the attributes, (i) load balancers configured to distribute network traffic among the virtual computing devices and (ii) storage volumes used by the virtual computing devices.

Abstract: A system includes a configuration management database (CMDB). Application programming interface (API) proxies associated with a managed network provide access to resources. The system also includes a discovery application configured to perform operations including determining a proxy uniform resource locator (URL) used to provide access to a particular resource of the resources through an API proxy of the API proxies and obtaining, from a computing device associated with the API proxy, an assignment of proxy URLs to corresponding target URLs by the API proxy. Each target URL of the corresponding target URLs address a respective resource of the resources. The proxy URLs are used to provide access to the resources through the API proxy. The operations also include selecting, from the assignment, a target URL assigned to the proxy URL, generating a mapping between the proxy URL and the target URL, and storing the mapping in the CMDB.

Abstract: Systems, methods, and media are used to identify phishing attacks. A notification of a phishing attempt with a parameter associated with a recipient of the phishing attempt is received at a security management node. In response, an indication of the phishing attempt is presented in a phishing attempt search interface. The phishing attempt search interface may be used to search for additional recipients, identify which recipients have been successfully targeted, and provide a summary of the recipients. Using this information, appropriate security measures in response to the phishing attempt for the recipients may be performed.

Abstract: An example system includes persistent storage and a discovery application configured to perform operations including obtaining a uniform resource locator (URL) that addresses a function of an application programming interface (API) provided by a remote computing system of remote computing systems that provide computing resources. The function returns attributes of computing resources specified by the URL. The operations additionally include generating (i) a system-specific portion of a request that invokes execution of the function and (ii) a system-invariant portion of the request. The system-specific portion adheres to first rules adopted by the remote computing system for interacting with the API. The system-invariant portion adheres to second rules adopted by each of the remote computing systems for interacting with respective APIs thereof.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform. The software application may be configured to: obtain a unit of programmatic code from a third-party computing system, where the unit of programmatic code is hosted by the third-party computing system on behalf of the managed network, and where a program using the unit of programmatic code is executable by computing resources of the third-party computing system that are assigned on demand; parse the unit of programmatic code for a pattern indicative of respective relationships between the unit of programmatic code and service(s) provided by the third-party computing system; generate an association between the unit of programmatic code and the service(s); and store, in the database, representations of the unit of programmatic code, the service(s), and the association therebetween as discovered configuration items.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform. The software application may be configured to: obtain a unit of programmatic code from a third-party computing system, where the unit of programmatic code is hosted by the third-party computing system on behalf of the managed network, and where a program using the unit of programmatic code is executable by computing resources of the third-party computing system that are assigned on demand; parse the unit of programmatic code for a pattern indicative of respective relationships between the unit of programmatic code and service(s) provided by the third-party computing system; generate an association between the unit of programmatic code and the service(s); and store, in the database, representations of the unit of programmatic code, the service(s), and the association therebetween as discovered configuration items.

Abstract: An embodiment may involve a computational instance including persistent storage, the persistent storage containing representations of virtual machines previously discovered in a server cluster. The embodiment may also involve one or more processors configured to perform operations involving: (i) transmitting, to the server cluster, a request for an event log, the event log containing events related to virtual machines configured in the server cluster; (ii) receiving, from the server cluster, the event log; (iii) determining that the event log contains one or more significant events related to a particular virtual machine from virtual machines configured in the server cluster; (iv) performing a discovery pattern on the server cluster, wherein output from performing the discovery pattern includes a characterization of the particular virtual machine; and (v) causing an update to be written to the persistent storage, wherein the update includes the characterization of the particular virtual machine.

Abstract: A computing system includes a database and a discovery application. The discovery application obtains credentials for accessing a server hosting a software bus application which connects a plurality of applications within a managed network. The discovery application selects, based on a pattern corresponding to the software bus application, one or more files to access, transmits, to the server, instructions to access the one or more files, and receives therefrom data identifying a plurality of attributes of the software bus application. Based on this data, the discovery application transmits, to the server, instructions to identify communicative connections established between the plurality of software applications by way of the software bus application and receives therefrom data identifying the communicative connections.

Abstract: A computing system includes a database and a discovery application. The discovery application obtains credentials for accessing a server hosting a software bus application which connects a plurality of applications within a managed network. The discovery application selects, based on a pattern corresponding to the software bus application, one or more files to access, transmits, to the server, instructions to access the one or more files, and receives therefrom data identifying a plurality of attributes of the software bus application. Based on this data, the discovery application transmits, to the server, instructions to identify communicative connections established between the plurality of software applications by way of the software bus application and receives therefrom data identifying the communicative connections.

Abstract: A discovery application may obtain, from a remote storage system configured to host storage structures, first data that identifies relationships among the storage structures. The discovery application may generate, based on the first data, a mapping of the storage structures, store the mapping as one or more configuration items, and provide, to the remote storage system, instructions configured to cause the remote storage system to notify the discovery application of modification events associated with the storage structures. The discovery application may receive, from the remote storage system, a notification of a modification event associated with a particular storage structure of the storage structures and, in response, obtain, from the remote storage system, second data that identifies a modification to the particular storage structure. The discovery application may modify the mapping based on the second data and store the modified mapping by updating the one or more configuration items.

Abstract: A computing system includes a database and a discovery application that initiates discovery of software applications within a managed network by probing the computing devices for applications in stalled thereon. The discovery application executes discovery patterns in an attempt to classify a discovered application and determines that the discovered application is unclassified after executing the discovery patterns. In response to determining that the discovered application is unclassified, the discovery application (i) generates a configuration item representing the discovered application without classification and (ii) selects a characteristic file containing attributes of the discovered application. The discovery application provides the characteristic file to a machine learning (ML) classifier trained using a plurality of characteristic files.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform and configured to: obtain, from an external computing system, information about a function-application arranged to execute source code segment(s) on demand; determine that the obtained information relates to (i) a plurality of authorization-keys each respectively arranged to authorize on-demand execution of one of the source code segments, (ii) a first key-value string pair that enables establishment of connectivity to a service of the external computing system or of another computing system, and/or (iii) a second key-value string pair that enables establishment of connectivity to a data source of the external computing system or of another computing system, and responsively determine association(s) between the source code segment(s), the function-application, the service, and/or the data source; and store the association(s) in t

Abstract: An example embodiment relates to discovering computing devices in a managed network that are involved in blockchain-based mining.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and server device(s) associated with the platform and configured to: transmit, to a third-party computing system, a request for general information identifying computing resources of the third-party computing system assigned to the managed network; receive, from the third-party computing system, a response indicating resource names and types of the resources that were identified; based on the response, determine that a first resource is of a first type, and responsively store, in the database, a first representation that has just data fields containing the general information from the response that identifies the first resource; and based on the response, determine that a second resource is of a second type, and responsively store, in the database, a second representation that has data fields arranged to contain specific information about the second resource.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and server device(s) associated with the platform and configured to: transmit, to a third-party computing system, a request for general information identifying computing resources of the third-party computing system assigned to the managed network; receive, from the third-party computing system, a response indicating resource names and types of the resources that were identified; based on the response, determine that a first resource is of a first type, and responsively store, in the database, a first representation that has just data fields containing the general information from the response that identifies the first resource; and based on the response, determine that a second resource is of a second type, and responsively store, in the database, a second representation that has data fields arranged to contain specific information about the second resource.

Abstract: A discovery application may obtain, from a remote storage system configured to host storage structures, first data that identifies relationships among the storage structures. The discovery application may generate, based on the first data, a mapping of the storage structures, store the mapping as one or more configuration items, and provide, to the remote storage system, instructions configured to cause the remote storage system to notify the discovery application of modification events associated with the storage structures. The discovery application may receive, from the remote storage system, a notification of a modification event associated with a particular storage structure of the storage structures and, in response, obtain, from the remote storage system, second data that identifies a modification to the particular storage structure. The discovery application may modify the mapping based on the second data and store the modified mapping by updating the one or more configuration items.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform. The software application may be configured to: obtain a unit of programmatic code from a third-party computing system, where the unit of programmatic code is hosted by the third-party computing system on behalf of the managed network, and where a program using the unit of programmatic code is executable by computing resources of the third-party computing system that are assigned on demand; parse the unit of programmatic code for a pattern indicative of respective relationships between the unit of programmatic code and service(s) provided by the third-party computing system; generate an association between the unit of programmatic code and the service(s); and store, in the database, representations of the unit of programmatic code, the service(s), and the association therebetween as discovered configuration items.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform. The software application may be configured to: obtain a unit of programmatic code from a third-party computing system, where the unit of programmatic code is hosted by the third-party computing system on behalf of the managed network, and where a program using the unit of programmatic code is executable by computing resources of the third-party computing system that are assigned on demand; parse the unit of programmatic code for a pattern indicative of respective relationships between the unit of programmatic code and service(s) provided by the third-party computing system; generate an association between the unit of programmatic code and the service(s); and store, in the database, representations of the unit of programmatic code, the service(s), and the association therebetween as discovered configuration items.