Abstract: Network devices can be registered to access a network using known host devices to thereby simplify the device registration process. The host device can be an administrator's device that is already registered and authorized to vouch for another user desiring to register his or her device. Alternatively, the host device can be the user's previously registered device and can be used to register the user's additional devices.

Abstract: A system, method, and computer-readable medium are disclosed for collecting and transmitting diagnostics information via a diagnostic information operation. The diagnostic information operation begins with a system periodically writing diagnostic information such as diagnostic errors and warnings to non-volatile local storage contained within the system. Upon detection of a failure, the user activates an NFC-enabled device (such as a mobile device) and positions the NFC-enabled device within NFC range of the failed system. The failed system then communicates the diagnostic information stored within the non-volatile local storage to NFC-enabled device.

Abstract: Systems and techniques for determining and displaying risk indicators are described. A set of event logs occurring in a time interval and associated with a user account retrieving may be retrieved from an event log database. For individual event logs in the set of event logs, a context may be determined. A resource associated with the individual log may have an associated classification. An activity risk associated with the individual event log may be determined based at least in part on the first context and, if applicable, on the associated classification. For individual event logs in the set of event logs, a risk indicator may be determined based at least in part on the activity risk. In some cases, a cumulative risk indicator may be determined for the particular time interval based on the risk indicators associated with the individual event logs.

Abstract: Systems and techniques to deputize agents in a system to reduce a number of event logs received by a coordinator are described. An agent belonging to a group of agents may receive a request to select a deputized agent. The agent may determine data associated with a component hosting the agent and send the data to a selection agent. The agent may receive a message from the selection agent indicating that the agent is to be the deputized agent. The deputized agent may receive one or more event logs from other agents in the group, determine that at least one event log has a high priority, and send the at least one event log to the coordinator. The deputized agent may store the one or more event logs in a storage device accessible to the hardware component.

Abstract: A network includes a workflow management system coupled to an administrator device, and servers coupled to a user device. A network change auditing system receives and stores workflow definitions from the workflow management system that are associated with respective workflows provided by the servers. The network change auditing system receives and stores activity events from the servers that are associated with instructions from user devices to the servers. The network change auditing system associates a first subset of the activity events with a first workflow based on the first subset of the activity events being defined by a first workflow definition. The network change auditing system receives an identification of a first activity event from an administrator device and, in response, provides an identification of the first workflow and at least one second activity event in the first subset of the activity events for display on the administrator device.

Abstract: Systems and techniques to identify and modify unused (or seldom used) access privileges are described. Group membership data may be correlated with access map data to create a user-resource access map identifying privilege levels associated with individual user accounts to access computing resources in a computing system. User activity event logs generated as a result of user accounts accessing the resources may be correlated with the user-resource access map to identify user accounts that do not use (or seldom use) particular privilege levels to access particular resources. The identified user accounts may be modified to remove the unused (or seldom used) privileges levels.

Abstract: Systems and techniques to deputize agents in a system to reduce a number of event logs received by a coordinator are described. An agent belonging to a group of agents may receive a request to select a deputized agent. The agent may determine data associated with a component hosting the agent and send the data to a selection agent. The agent may receive a message from the selection agent indicating that the agent is to be the deputized agent. The deputized agent may receive one or more event logs from other agents in the group, determine that at least one event log has a high priority, and send the at least one event log to the coordinator. The deputized agent may store the one or more event logs in a storage device accessible to the hardware component.

Abstract: A system, method, and computer-readable medium for performing an authentication operation comprising: identifying a plurality of user devices associated with a user of an information handling system; determining when at least some of the plurality of user devices are within a predetermined range of the information handling system; and, authenticating the user as an authorized user of the information handling system when at least some of the plurality of user devices are within the predetermined range of the information handling system.

Abstract: A system, method, and computer-readable medium are disclosed for collecting and transmitting diagnostics information via a diagnostic information operation. The diagnostic information operation begins with a system periodically writing diagnostic information such as diagnostic errors and warnings to non-volatile local storage contained within the system. Upon detection of a failure, the user activates an NFC-enabled device (such as a mobile device) and positions the NFC-enabled device within NFC range of the failed system. The failed system then communicates the diagnostic information stored within the non-volatile local storage to NFC-enabled device.

Abstract: A single interface can be provided for accessing resources that are distributed among multiple platforms. Resources that are stored in different platforms and to which a user should have access can be identified. A stub can be created for each identified resource and can include functionality for causing the resource to be opened when the stub is selected. These stubs can then be combined in a single folder or other type of user interface where they can be selected to cause the corresponding resource to be opened.

Abstract: Systems and techniques to deputize agents in a system to reduce a number of event logs received by a coordinator are described. An agent belonging to a group of agents may receive a request to select a deputized agent. The agent may determine data associated with a component hosting the agent and send the data to a selection agent. The agent may receive a message from the selection agent indicating that the agent is to be the deputized agent. The deputized agent may receive one or more event logs from other agents in the group, determine that at least one event log has a high priority, and send the at least one event log to the coordinator. The deputized agent may store the one or more event logs in a storage device accessible to the hardware component.

Abstract: Systems and techniques for displaying timelines of event logs are described. A software application may identify event logs associated with an identifier, such as an IP address of a network element or a username. The software application may group the identified event logs based on specified criteria. The software application may determine multiple sessions in which an individual session includes a group of event logs arranged along a timeline. Sessions associated with a same network element may be displayed with a same magnitude. Sessions associated with different network elements may be displayed with different magnitudes. For example, a first timeline of event logs in a first session at a first network element may be displayed at a first height. A second timeline of event logs in a second session at a second network element may be displayed at a second height.

Abstract: In one embodiment, a method is performed by a computer system. The method includes monitoring events in relation to files stored at multiple network nodes and, responsive to the monitoring, detecting that a new file has been created from an existing file. The method further includes accessing a stored file-family model of the existing file, the stored file-family model comprising interconnected nodes, wherein the interconnected nodes represent a plurality of overlapping file variants such that one of the interconnected nodes represents the existing file. In addition, the method includes logically connecting the existing file and the new file in the stored file-family model. The method also includes determining a primary file variant in the stored file-family model and, responsive to a determination that the existing file is not the primary file variant, notifying one or more users.

Abstract: A system for monitoring devices in a network comprising a coordinator operating on a first processor and configured to detect a plurality of active devices and to install an audit agent on each of the plurality of active devices. The audit agents configured to obtain configuration data for the active device that they are installed on using a processor of the active device, and to obtain configuration for each of a plurality of passive devices that the active device can access, where the passive devices are unable to support installation of an audit agent, and to transmit the configuration data to the coordinator. The coordinator configured to receive the configuration data for the active device and for the passive devices and to store the configuration data in a format that allows the configuration data to be selectively retrieved for the active device and the passive devices.

Abstract: A system, method, and computer-readable medium are disclosed for collecting and transmitting diagnostics information via a diagnostic information operation. The diagnostic information operation begins with a system periodically writing diagnostic information such as diagnostic errors and warnings to non-volatile local storage contained within the system. Upon detection of a failure, the user activates an NFC-enabled device (such as a mobile device) and positions the NFC-enabled device within NFC range of the failed system. The failed system then communicates the diagnostic information stored within the non-volatile local storage to NFC-enabled device.

Abstract: Systems and techniques for managing alert profiles, including creating the alert profiles and deactivating the alert profiles, are described. Auditing software executing on a central server may receive an event log from a software agent. The event log may identify activities associated with a network element in a computer system. The auditing software may include a classifier trained using machine learning. The auditing software may determine that the event log is indicative of an interesting activity, such as malicious activity. The auditing software may create an alert profile. The auditing software may assign a severity to the alert profile. The auditing software may determine whether the alert profile is relevant. The auditing software may deactivate the alert profile based on determining that the alert profile is not relevant.

Abstract: Systems and techniques for identifying potential problems associated with deploying a software package in a computing system are described. The software package may include multiple components that are installed in various locations in the computing system. Multiple agents that perform mock activities emulating the activities of the multiple components may be deployed in the computing system. Activity data may be gathered when the multiple agents are performing the mock activities and used to identify potential problems.

Abstract: A system for controlling printing of classified documents, comprising a print server having a processor and software operating on the processor, the software configured to receive data for printing and associated print control data and to format the data for printing according to the associated print control data. A print agent having software configured to operate on the processor of the print server, the print agent software configured to interface with the print server software to obtain classification data associated with the data for printing and to determine whether the classification data prevents the data for printing from being printed.

Abstract: A single interface can be provided for accessing resources that are distributed among multiple platforms. Resources that are stored in different platforms and to which a user should have access can be identified. A stub can be created for each identified resource and can include functionality for causing the resource to be opened when the stub is selected. These stubs can then be combined in a single folder or other type of user interface where they can be selected to cause the corresponding resource to be opened.

Abstract: Systems and techniques to deputize agents in a system to reduce a number of event logs received by a coordinator are described. An agent belonging to a group of agents may receive a request to select a deputized agent. The agent may determine data associated with a component hosting the agent and send the data to a selection agent. The agent may receive a message from the selection agent indicating that the agent is to be the deputized agent. The deputized agent may receive one or more event logs from other agents in the group, determine that at least one event log has a high priority, and send the at least one event log to the coordinator. The deputized agent may store the one or more event logs in a storage device accessible to the hardware component.