Abstract: Automatic data modeling in a low-latency data access and analysis system includes identifying an analytical-object in response to first data expressing usage intent, generating an analytical model generation data-query for the analytical-object, obtaining a trained analytical model generated in accordance with the analytical model generation query and trained using results data obtained in accordance with the analytical-object, generating a resolved-request representing second data expressing usage intent and indicating a request for results data obtained using the trained analytical model, generating an analytical model results data-query for obtaining the results data in accordance with the trained analytical model and the analytical-object, and outputting data for presenting a visualization of the results data obtained by executing the analytical model results data-query, wherein a first portion of the results data corresponds with the analytical-object and a second portion of the results data corresponds

Abstract: A method is presented for analyzing an original software program as a potentially evasive malware. The method may comprise discovering at least one revealed instruction in the original software program, where the revealed instructions are not executed when the original software program is run without modification; modifying the original software program to create a modified program that will execute at least one revealed instruction when the modified program is run; and exploring the at least one revealed instruction by running the modified program.

Abstract: A hybrid static/dynamic binary rewrite method is presented, comprising: a one-time configuration step for instrumentation of an unmodified executable binary, invoking the executable binary by copying the unmodified executable binary into a system memory image and running the binary from the system memory image, and rewriting the system memory image by inserting at a safe location one or more new instructions in place of existing instructions, where the one or more new instructions transfer execution control to instrumentation instructions located elsewhere within the system memory image, and where the instrumentation instructions that were at least in part not contained in the unmodified executable binary.