Abstract: A computer-implemented method generates a trigger registration for a selected triggering type. The generated trigger registration is stored in a triggering persistency. A received event from an event persistency is analyzed and data associated with the analyzed event is compared with the triggering persistency. Based on the comparison and using a pattern execution framework, an enterprise threat detection (ETD) pattern is processed to perform actions responsive to the received event.

Abstract: A filter is selected from one or more filters defined for an ETD Network Graph. Events are fetched from the selected log files based on the selected filter and entities identified based on the fetched Events. Relationships are determined between the identified entities, and the determined relationships and identified entities are displayed in the ETD Network Graph. An identified entity is selected to filter data in an ETD Event Series Chart. An Event is selected in the ETD Event Series Chart to display Event Attributes in an Event Attribute Dialog. An Event Attribute is selected in the Event Attribute Dialog to filter Events in the ETD Event Series Chart.

Abstract: An enterprise threat detection (ETD) forensic workspace is established according to a particular timeframe and permitting defining a selection of data types from available log data for an evaluation of events associated with one or more entities. A chart is defined illustrating a graphical distribution of a particular data type in the forensic workspace. A snapshot associated with the chart is generated, the snapshot saving a copy of all data necessary to re-create the chart into an associated snapshot object. The snapshot is associated with a snapshot page for containing the snapshot and the snapshot page is saved within the ETD forensic workspace.

Abstract: The present disclosure provides an air-soak containing regeneration process reducing its time. The process includes (i) removing surface carbon species from a gallium-based alkane dehydrogenation catalyst in a combustion process in the presence of a fuel gas; (ii) conditioning the gallium-based alkane dehydrogenation catalyst after (i) in air-soak treatment at a temperature of 660° C. to 850° C. with (iii) a flow of oxygen-containing gas having (iv) 0.

Abstract: A process for catalytic dehydrogenation comprising mixing fluidization gas a fluidization gas which comprises methane, natural gas, ethane, hydrogen, nitrogen or any combination thereof with a fluidized catalyst stream that has passed through a catalytic dehydrogenation reactor and has exited a catalyst separation zone to form a catalyst recycle stream; and recycling the catalyst recycle stream either directly or indirectly into a catalytic dehydrogenation reactor is provided.

Abstract: Search results are received from an initiated free text search of log data from one or more logs, where the free text is performed using search terms entered into a free text search graphical user interface. A set of at least one search result is selected from the search results containing an event desired to be identified in a completed enterprise threat detection (ETD) pattern. A forensic lab application is rendered to complete an ETD pattern. An event filter is added for an event type based on normalized log data to a path. A relative ETD pattern time range is set and an ETD pattern is completed based on the added event filter.

Abstract: A multiple-state health monitoring apparatus for critical components in a hoisting system includes a frame. The frame is a square structure formed by welding a plurality of rectangular steels. A steel wire rope is arranged around a periphery of the square structure. A power system, a friction-and-wear apparatus, a brake-and-wear apparatus, and a tensioning apparatus are sequentially mounted from left to right on a bottom layer of the square structure. A bearing signal collection system, a tension sensor, an excitation apparatus, and a steel-wire-rope image collection system are sequentially mounted from left to right on a top layer of the square structure. The steel wire rope sequentially passes through all the apparatuses or systems and is driven by the power system to perform circling. All the apparatuses or systems are used to monitor an operation status of the steel wire rope.

Abstract: A computer-implemented method receives a program code and a signature associated with the program code from a database persistency associated with an enterprise threat detection (ETD) system. The received program code is associated with a configuration check, and the configuration check is developed at a development computing system and can collect information associated with a computing system. The received program code and the signature associated with the program code is distributed to a plurality of computing systems that are monitored by the ETD system. At least one configuration check result is received, and the configuration check result is generated by executing the program code on the computing system. The at least one configuration check result then transmitted to the database persistence, and the at least one result is displayed on a database graphical user interface (GUI) associated with the database persistency.

Abstract: A first Event is identified from a normalized log persistency layer, where the first Event is associated with an attack on a computing system. A plurality of Events are fetched from the normalized log persistency layer, where each fetched Event correlates with its neighboring fetched Event by at least one correlation attribute, and each of the fetched Event and the first Event are presented on a graphical user interface as a chain of events. A workspace is generated, where the workspace comprises a series of attack paths, where each attack path corresponds to one Event in the chain of events. An ETD pattern is created based on the attack paths in the workspace.

Abstract: Subnet information and location information is received from a database by a smart data streaming engine (SDS). A particular subnet of the subnet information is associated with a particular location of the location information by a globally unique location ID value. Log event data received in the SDS is normalized as normalized log event data. The normalized log event data is enriched with subnet and location information as enriched log event data and written into a log event persistence in the database. A subnet ID value retrieved from an enriched log event of the enriched log event data is used by an enterprise threat detection (ETD) system to determine a location associated with the enriched log event using a location ID value associated with the subnet ID.

Abstract: A computer-implemented method generates a trigger registration for a selected triggering type. The generated trigger registration is stored in a triggering persistency. A received event from an event persistency is analyzed and data associated with the analyzed event is compared with the triggering persistency. Based on the comparison and using a pattern execution framework, an enterprise threat detection (ETD) pattern is processed to perform actions responsive to the received event.

Abstract: Search results are received from an initiated free text search of log data from one or more logs, where the free text is performed using search terms entered into a free text search graphical user interface. A set of at least one search result is selected from the search results containing an event desired to be identified in a completed enterprise threat detection (ETD) pattern. A forensic lab application is rendered to complete an ETD pattern. An event filter is added for an event type based on normalized log data to a path. A relative ETD pattern time range is set and an ETD pattern is completed based on the added event filter.

Abstract: A path associated with a set of selected log data is defined. An indication is received on a graphical user interface (GUI) to generate a bubblegram associated with the path, wherein the bubblegram comprises one or more bubbles, each bubble representing a particular dimension associated with the selected path. The one or more bubbles are rendered on the GUI according to a performed ranking of the one or more bubbles. A bubble is selected to generate a filter for the path based on the dimension associated with the bubble. A subsequent bubblegram is rendered based on a narrowed set of the selected log data.

Abstract: A big data analytics system includes an event monitoring controller that detects a user targeted event from an initial digital query data flow. An event conversion controller determines at least one contextual element associated with the at least one user targeted event, and automatically converts the at least one contextual element into a search criteria. An external data query builder controller automatically executes an external search query based on the search criteria. A data fusing controller automatically fuses the at least one contextual element generated from the at least one user targeted event, together with external search results generated from the external search query and the initial query data flow to generate a fused data file.

Abstract: Manage sulfur present as sulfur or a sulfur compound in a hydrocarbon feedstream while effecting dehydrogenation of hydrocarbon(s) (e.g. propane) contained in the hydrocarbon feedstream to its/their corresponding olefin (e.g. propylene where the hydrocarbon is propane) without subjecting the feedstream to desulfurization before it contacts a fluidizable dehydrogenation catalyst that is both a desulfurant and a dehydrogenation catalyst and comprises gallium and platinum on an alumina or alumina-silica catalyst support with optional alkali or alkaline earth metal such as potassium. Contact with such a catalyst yields a desulfurized crude olefin product that corresponds to the hydrocarbon and has a reduced amount of sulfur or sulfur compounds relative to the sulfur or sulfur compounds present in the hydrocarbon feedstream prior to contact with the catalyst.

Abstract: The present disclosure relates to, inter alia, a method of quantitating an amount of an antibody molecule from a mixture comprising two or more antibody molecules, comprising separating each of the two or more antibody molecules from the mixture by hydrophobic interaction chromatography high performance liquid chromatography (HIC-HPLC) and quantitating an amount of each antibody molecule, wherein the molecular weight of each antibody molecule is within 15 kDa of any other antibody molecule in the mixture and either each antibody molecule is different from another antibody molecule in the mixture by more than about 0.25 unit on the Kyte & Doolittle hydropathy scale or each of the antibody molecules when nm alone on HIC-HPLC elutes at distinct run time with little overlap from the other antibody molecules in the mixture, or both.

Abstract: A filter is selected from one or more filters defined for an ETD Network Graph. Events are fetched from the selected log files based on the selected filter and entities identified based on the fetched Events. Relationships are determined between the identified entities, and the determined relationships and identified entities are displayed in the ETD Network Graph. An identified entity is selected to filter data in an ETD Event Series Chart. An Event is selected in the ETD Event Series Chart to display Event Attributes in an Event Attribute Dialog. An Event Attribute is selected in the Event Attribute Dialog to filter Events in the ETD Event Series Chart.

Abstract: One or more entities are selected for which logged Events are to be displayed in an Event Series Chart. One or more filters and a timeframe are selected. Events are fetched from one or more selected log files based on the one or more selected filters and the timeframe. The fetched Events are displayed in an Event Series Chart according to an associated timestamp and identification Event property value associated with each fetched Event.

Abstract: A process for catalytic dehydrogenation comprising mixing fluidization gas a fluidization gas which comprises methane, natural gas, ethane, hydrogen, nitrogen or any combination thereof with a fluidized catalyst stream that has passed through a catalytic dehydrogenation reactor and has exited a catalyst separation zone to form a catalyst recycle stream; and recycling the catalyst recycle stream either directly or indirectly into a catalytic dehydrogenation reactor is provided.

Abstract: A big data analytics system includes an event monitoring controller that detects a user targeted event from an initial digital query data flow. An event conversion controller determines at least one contextual element associated with the at least one user targeted event, and automatically converts the at least one contextual element into a search criteria. An external data query builder controller automatically executes an external search query based on the search criteria. A data fusing controller automatically fuses the at least one contextual element generated from the at least one user targeted event, together with external search results generated from the external search query and the initial query data flow to generate a fused data file.