Abstract: Some embodiments may include an optical assembly usable to process light output from a laser source. The apparatus may include a housing to receive a distal end of an optical fiber that outputs the laser light; one or more actively cooled or passively cooled beam traps contained within the housing or coupled to the housing; and one or more optical apertures located inside the housing, at least one of the optical apertures to define a numerical aperture (NA) of a first portion of the laser light based on a radial dimension of the at least one optical aperture, the at least one optical aperture arranged to pass the first portion of the light and redirect a second different portion of the laser light to the one or more actively cooled or passively cooled beam traps. Other embodiments may be disclosed and/or claimed.

Abstract: Systems and methods are described for managing high volumes of alerts to increase security, reduce noise, reduce duplication of work, and increase productivity of analysts dealing with and triaging alerts. A work unit queue may be configured to buffer or smooth workflows and decouple heavy processing which may improve performance and scalability to prevent duplicate assignments. Queueing services provide lag times to prevent over-assignment or double assignment of alerts to work units. System security may be improved by creating an authentication or verification step before allowing users to update alert statuses such that only users with work unit tokens that match alert tokens may update alert statuses.

Abstract: A method for disrupting a detected cyberthreat can include receiving a request, the request identifying suspected malicious content; identifying one or more indicators of compromise (IOCs) associated with the content; enriching the request with the IOCs; verifying the request; and reporting the verified request and the one or more IOCs to a disruption network.

Abstract: A method for disrupting a detected cyberthreat can include receiving a request, the request identifying suspected malicious content; identifying one or more indicators of compromise (IOCs) associated with the content; enriching the request with the IOCs; verifying the request; and reporting the verified request and the one or more IOCs to a disruption network.

Abstract: A system for processing user utterances and/or text based queries that tracks context data of a current dialog between the system and the user, can determine values for slots by determining if the value was mentioned in a previous turn of the dialog. The system may employ a question-answer model and construct a question including the domain name, slot name, and potential slot values. The system may process the previous turns of the dialog and the constructed question to determine the slot value. The system may track a dialog that relates to multiple domains and may determine the slot value based on a slot value that is mentioned in relation to another domain.

Abstract: A method may include a database storing a plurality of tasks, each task having a task ID, a date, a severity level, an enterprise ID, a status, and an assignment field; a user device; a processor; and a server configured to receive a work unit request from the user device, the request comprising a strategy for selecting tasks; create a work unit, the work unit having a state indicator; assign a token ID to the work unit; select a task from the database based on the strategy; add the task ID for the selected task to the work unit to create a populated work unit; change the status of the selected task to indicate the task is checked out; insert the token ID into the assignment field; send the populated work unit to the user device; and change the state indicator to indicate the work unit is checked out.