Abstract: A system and method for reducing false positive detection of cybersecurity events is disclosed. The method includes: configuring a plurality of resources to deploy a sensor, each sensor configured to listen on a data link layer for an event; receiving from each sensor a plurality of events, each event including an event type; generating a group of resources having a common attribute; generating a noise metric for the group of resources based on a number of events of an event type; generating a threshold based on the noise metric; configuring each sensor of a resource from the group of resources to detect a number of events exceeding the threshold; detecting a cybersecurity event in response to determining that a first resource from the group of resources has a number of events of a first type exceeding the threshold; and initiating a mitigation action based on the detected cybersecurity event.

Abstract: A system and method for detecting privilege escalation on a resource deployed in a computing environment is presented. The method includes configuring the resource to deploy thereon a sensor, the sensor configured to detect events on a data link layer of the resource; receiving from the sensor a detection indicating a permission-based event of a first actor, the permission-based event indicating a first permission set of the first actor; querying a database to detect a second permission set of the first actor; detecting that the first permission set includes a permission which is not in the second permission set; detecting a privilege escalation event in response to detecting that the first permission set includes a permission which is not in the second permission set; and initiating a mitigation action in response to detecting the privilege escalation event.

Abstract: A system and method for reducing false positive detection of cybersecurity events is disclosed.

Abstract: A system and method for detecting privilege escalation on a resource deployed in a computing environment is disclosed. The method includes: configuring the resource to deploy thereon a sensor, the sensor configured to listen on a data link layer of the resource for an event; receiving from the sensor a permission-based event based on a first actor, the permission-based event indicating a first permission set of the first actor; querying a database to detect a second permission set of the first actor; detecting that the first permission set includes a permission which is not in the second permission set; determining that the resource is involved in a privilege escalation event in response to detecting that the first permission set includes a permission which is not in the second permission set; and initiating a mitigation action in response to the determined privilege escalation event.

Abstract: A method and system for control plane containment of cybersecurity threat is presented. The method includes generating at least a detection rule for application by a sensor configured to detect events; configuring the sensor to deploy on a resource in a cloud computing environment, and deploying the sensor on the resource, wherein the sensor is configured to: apply the at least a detection rule on a detected event; detect an event which triggers the at least a detection rule, the event corresponding to a process running on the resource; and halt execution of the process.

Abstract: Systems and methods for displaying electronic messages are disclosed. In one aspect, a method is performed at a computing device. The method includes: (1) receiving a plurality of electronic messages; (2) assigning a first subset of the messages to a predefined group category based on a set of content-based clustering rules and content in respective bodies of the messages; (3) concurrently displaying a second subset of the messages and a cluster graphic corresponding to the predefined group category, where the cluster graphic includes a label that describes the predefined group category; (4) while concurrently displaying the second subset of electronic messages and the cluster graphic, receiving user selection of the cluster graphic; and (5) in response, displaying a plurality of messages in the predefined group category, including displaying at least one message from the first subset of messages.

Abstract: A system and method for reducing false positive detection of cybersecurity events is disclosed.

Abstract: A system and method for detecting a cybersecurity event based on multiple cybersecurity data sources is disclosed. The method includes: receiving data from a first cybersecurity source, the first cybersecurity source configured to generate data based on a resource deployed in a computing environment; receiving data from a second cybersecurity source, the second cybersecurity source configured to generate data based on the resource deployed in the computing environment, wherein the second cybersecurity source has a source type which is different from a source type of the first cybersecurity source; detecting a cybersecurity event on the resource based on data received from the first cybersecurity source and data received from the second cybersecurity source; and initiating a mitigation action for the resource in response to detecting the cybersecurity event.

Abstract: A system and method for detecting privilege escalation on a resource deployed in a computing environment is disclosed. The method includes: configuring the resource to deploy thereon a sensor, the sensor configured to listen on a data link layer of the resource for an event; receiving from the sensor a permission-based event based on a first actor, the permission-based event indicating a first permission set of the first actor; querying a database to detect a second permission set of the first actor; detecting that the first permission set includes a permission which is not in the second permission set; determining that the resource is involved in a privilege escalation event in response to detecting that the first permission set includes a permission which is not in the second permission set; and initiating a mitigation action in response to the determined privilege escalation event.

Abstract: A system and method for reducing network communication from a sensor for detecting cybersecurity threats is disclosed. The method includes: configuring the resource to deploy thereon a sensor, the sensor configured to listen on a data link layer of the resource for an event; configuring the sensor to generate an event set from a plurality of events, based on a rule; detecting that a number of events in the event set exceeds a predetermined threshold; determining that a cybersecurity event occurred in response to detecting that the number of events exceeds the predetermined threshold; and initiating a mitigation action based on the cybersecurity event.

Abstract: Systems and methods for displaying electronic messages are disclosed. In one aspect, a method is performed at a computing device. The method includes: (1) receiving a plurality of electronic messages; (2) assigning a first subset of the messages to a predefined group category based on a set of content-based clustering rules and content in respective bodies of the messages; (3) concurrently displaying a second subset of the messages and a cluster graphic corresponding to the predefined group category, where the cluster graphic includes a label that describes the predefined group category; (4) while concurrently displaying the second subset of electronic messages and the cluster graphic, receiving user selection of the cluster graphic; and (5) in response, displaying a plurality of messages in the predefined group category, including displaying at least one message from the first subset of messages.

Abstract: Systems and methods for displaying electronic messages are disclosed. In one aspect, a method is performed at a computing device. The method includes: (1) receiving a plurality of electronic messages; (2) assigning a first subset of the messages to a predefined group category based on a set of content-based clustering rules and content in respective bodies of the messages; (3) concurrently displaying a second subset of the messages and a cluster graphic corresponding to the predefined group category, where the cluster graphic includes a label that describes the predefined group category; (4) while concurrently displaying the second subset of electronic messages and the cluster graphic, receiving user selection of the cluster graphic; and (5) in response, displaying a plurality of messages in the predefined group category, including displaying at least one message from the first subset of messages.

Abstract: Systems and methods for displaying electronic messages are disclosed. In one aspect, a method is performed at a computing device. The method includes: (1) receiving a plurality of electronic messages; (2) assigning a first subset of the messages to a predefined group category based on a set of content-based clustering rules and content in respective bodies of the messages; (3) concurrently displaying a second subset of the messages and a cluster graphic corresponding to the predefined group category, where the cluster graphic includes a label that describes the predefined group category; (4) while concurrently displaying the second subset of electronic messages and the cluster graphic, receiving user selection of the cluster graphic; and (5) in response, displaying a plurality of messages in the predefined group category, including displaying at least one message from the first subset of messages.

Abstract: Systems and methods for displaying electronic messages are disclosed. In one aspect, a method is performed at a computing device. The method includes: (1) receiving a plurality of electronic messages; (2) assigning a first subset of the messages to a predefined group category based on a set of content-based clustering rules and content in respective bodies of the messages; (3) concurrently displaying a second subset of the messages and a cluster graphic corresponding to the predefined group category, where the cluster graphic includes a label that describes the predefined group category; (4) while concurrently displaying the second subset of electronic messages and the cluster graphic, receiving user selection of the cluster graphic; and (5) in response, displaying a plurality of messages in the predefined group category, including displaying at least one message from the first subset of messages.

Abstract: Systems and methods for displaying electronic messages are disclosed. In one aspect, a method is performed at a computing device. The method includes: (1) receiving a plurality of electronic messages; (2) assigning a first subset of the messages to a predefined group category based on a set of content-based clustering rules and content in respective bodies of the messages; (3) concurrently displaying a second subset of the messages and a cluster graphic corresponding to the predefined group category, where the cluster graphic includes a label that describes the predefined group category; (4) while concurrently displaying the second subset of electronic messages and the cluster graphic, receiving user selection of the cluster graphic; and (5) in response, displaying a plurality of messages in the predefined group category, including displaying at least one message from the first subset of messages.

Abstract: Systems and methods for displaying electronic messages are disclosed. In one aspect, a method is performed at a computing device. The method includes: (1) receiving a plurality of electronic messages; (2) assigning a first subset of the messages to a predefined group category based on a set of content-based clustering rules and content in respective bodies of the messages; (3) concurrently displaying a second subset of the messages and a cluster graphic corresponding to the predefined group category, where the cluster graphic includes a label that describes the predefined group category; (4) while concurrently displaying the second subset of electronic messages and the cluster graphic, receiving user selection of the cluster graphic; and (5) in response, displaying a plurality of messages in the predefined group category, including displaying at least one message from the first subset of messages.

Abstract: Systems and methods for displaying electronic messages are disclosed. In one aspect, a method is performed at a computing device. The method includes: (1) receiving a plurality of electronic messages; (2) assigning a first subset of the messages to a predefined group category based on a set of content-based clustering rules and content in respective bodies of the messages; (3) concurrently displaying a second subset of the messages and a cluster graphic corresponding to the predefined group category, where the cluster graphic includes a label that describes the predefined group category; (4) while concurrently displaying the second subset of electronic messages and the cluster graphic, receiving user selection of the cluster graphic; and (5) in response, displaying a plurality of messages in the predefined group category, including displaying at least one message from the first subset of messages.

Abstract: Systems and methods for displaying electronic messages are disclosed. In one aspect, a method is performed at a computing device. The method includes: (1) receiving a plurality of electronic messages; (2) assigning a first subset of the messages to a predefined group category based on a set of content-based clustering rules and content in respective bodies of the messages; (3) concurrently displaying a second subset of the messages and a cluster graphic corresponding to the predefined group category, where the cluster graphic includes a label that describes the predefined group category; (4) while concurrently displaying the second subset of electronic messages and the cluster graphic, receiving user selection of the cluster graphic; and (5) in response, displaying a plurality of messages in the predefined group category, including displaying at least one message from the first subset of messages.

Abstract: An apparatus and method for natural hand processing for virtual reality. For example, one embodiment of an apparatus comprises: graphics processing circuitry to render left and right scenes responsive to a virtual reality application, the left and right scenes to be displayed on left and right displays, respectively, of a virtual reality device; and a natural hand processing pipeline to project a representation of a user's hands into the left and right scenes to allow the user to interact with one or more objects in the scenes, the natural hand processing pipeline comprising: a depth/mask data smoothing and reconstruction module to receive noisy depth and mask data associated with images of the user's hands and to enhance the noisy depth data and mask data to generate enhanced depth and mask data; a hand mesh generator to generate a hand mesh using the enhanced depth and mask data; and a mesh data projector to project the hand mesh into the left and right scenes.

Abstract: A system for a tracker for cursor navigation is described herein. The system includes a display, camera, memory, and processor. The memory that is to store instructions and is communicatively coupled to the camera and the display. The processor is communicatively coupled to the camera, the display, and the memory. When the processor is to execute the instructions, the processor is to extract an object mask of an object and execute an optical flow on good feature points from the object mask. The processor is also to estimate a movement of the object and render a cursor on the display based on the movement of the object.