Abstract: Techniques are described for providing an IT and security operations mobile application for managing IT and security operations instances of an IT and security operations application via a mobile device. The IT and security operations mobile application can be linked to the IT and security operations application to enable the IT and security operations application to send messages (e.g., notifications, alerts, action requests, etc.) related the occurrences of incidents/events in an IT environment, such as security-related incident, that can impact the operation of the IT environment. The IT and security operations mobile application enables a user to respond to the messages by initiating actions that are sent to the IT and security operations application for executing within the IT environment.

Abstract: Described herein are techniques are provided for enabling a security orchestration, automation, and response (SOAR) service to automatically manage apps used to interface with an integrated security operations service and other related devices and services. Further described herein is a SOAR app generator service or application used to automate the creation of apps for a SOAR service based on application programming interfaces (API) specifications for related devices or services, as well as visual playbook editor interfaces for a SOAR service that enable the configuration of complex action input parameters including arrays and objects.

Abstract: Techniques are described for enabling analysts and other users of an IT operations platform to identify certain data objects managed by the platform (for example, events, files, notes, actions results, etc.) as “evidence” when such data objects are believed to be of particular significance to an investigation or other matter. For example, an event generated based on data ingested from an anti-virus service and representing a security-related incident might include artifacts indicating an asset identifier, a hash value of a suspected malicious file, a file path on the infected endpoint, and so forth. An analyst can use various interfaces and interface elements of an IT operations platform to indicate which of such events and/or artifacts, if any, represent evidence in the context of the investigation that the analyst is conducting. In response, the IT operations platform can perform various automated actions.

Abstract: Techniques are described for enabling analysts and other users of an IT operations platform to identify certain data objects managed by the platform (for example, events, files, notes, actions results, etc.) as “evidence” when such data objects are believed to be of particular significance to an investigation or other matter. For example, an event generated based on data ingested from an anti-virus service and representing a security-related incident might include artifacts indicating an asset identifier, a hash value of a suspected malicious file, a file path on the infected endpoint, and so forth. An analyst can use various interfaces and interface elements of an IT operations platform to indicate which of such events and/or artifacts, if any, represent evidence in the context of the investigation that the analyst is conducting. In response, the IT operations platform can perform various automated actions.

Abstract: Techniques are described for providing an IT and security operations mobile application for managing IT and security operations instances of an IT and security operations application via a mobile device. The IT and security operations mobile application can be linked to the IT and security operations application to enable the IT and security operations application to send messages (e.g., notifications, alerts, action requests, etc.) related the occurrences of incidents/events in an IT environment, such as security-related incident, that can impact the operation of the IT environment. The IT and security operations mobile application enables a user to respond to the messages by initiating actions that are sent to the IT and security operations application for executing within the IT environment.

Abstract: Techniques are described for providing an IT and security operations mobile application for managing IT and security operations instances of an IT and security operations application via a mobile device. The IT and security operations mobile application can be linked to the IT and security operations application to enable the IT and security operations application to send messages (e.g., notifications, alerts, action requests, etc.) related the occurrences of incidents/events in an IT environment, such as security-related incident, that can impact the operation of the IT environment. The IT and security operations mobile application enables a user to respond to the messages by initiating actions that are sent to the IT and security operations application for executing within the IT environment.

Abstract: Techniques are described for providing an IT and security operations mobile application for managing IT and security operations instances of an IT and security operations application via a mobile device. The IT and security operations mobile application can be linked to the IT and security operations application to enable the IT and security operations application to send messages (e.g., notifications, alerts, action requests, etc.) related the occurrences of incidents/events in an IT environment, such as security-related incident, that can impact the operation of the IT environment. The IT and security operations mobile application enables a user to respond to the messages by initiating actions that are sent to the IT and security operations application for executing within the IT environment.

Abstract: A method for generating a message using a phone includes recording messages and phone numbers in a database, assigning a message to one or more of the numbers, and comparing an incoming phone number with the numbers. The message is transmitted to a phone used for placing the incoming phone call when the incoming phone number is in the database. A system includes first and second phones, a database containing phone numbers and messages, a device for establishing communications between the phones, and an algorithm. The algorithm assigns an authorization code to some numbers in the database. The algorithm assigns the message to a phone number having the authorization code, and automatically compares the incoming phone number to the phone numbers in the database to determine if the authorization code has been assigned. The message is transmitted to the first phone when the incoming phone number has the authorization code.

Abstract: A method for generating a message using a phone includes recording messages and phone numbers in a database, assigning a message to one or more of the numbers, and comparing an incoming phone number with the numbers. The message is transmitted to a phone used for placing the incoming phone call when the incoming phone number is in the database. A system includes first and second phones, a database containing phone numbers and messages, a device for establishing communications between the phones, and an algorithm. The algorithm assigns an authorization code to some numbers in the database. The algorithm assigns the message to a phone number having the authorization code, and automatically compares the incoming phone number to the phone numbers in the database to determine if the authorization code has been assigned. The message is transmitted to the first phone when the incoming phone number has the authorization code.

Abstract: A method for generating enhanced map data includes generating a geocoded graphic of an area using a map portal, the graphic including a recommended route, and then transforming landmark data including traffic control device information for the route into representative icons. The icons are overlaid onto the route to form at least part of the enhanced map data, which is displayed on a computer display. A data server in communication with at least one information source and a computer device having a display screen includes a central processing unit (CPU) and an algorithm executable by the CPU. Execution of the algorithm generates the enhanced map data using information from the information source, and automatically displays the enhanced map graphic on the display screen of the computer device. The icons can also be embedded within text-based driving directions that are generated as another part of the enhanced map data.