Abstract: Systems, methods, and media are used to identify phishing attacks. A notification of a phishing attempt with a parameter associated with a recipient of the phishing attempt is received at a security management node. In response, an indication of the phishing attempt is presented in a phishing attempt search interface. The phishing attempt search interface may be used to search for additional recipients, identify which recipients have been successfully targeted, and provide a summary of the recipients. Using this information, appropriate security measures in response to the phishing attempt for the recipients may be performed.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform. The software application may be configured to: obtain a unit of programmatic code from a third-party computing system, where the unit of programmatic code is hosted by the third-party computing system on behalf of the managed network, and where a program using the unit of programmatic code is executable by computing resources of the third-party computing system that are assigned on demand; parse the unit of programmatic code for a pattern indicative of respective relationships between the unit of programmatic code and service(s) provided by the third-party computing system; generate an association between the unit of programmatic code and the service(s); and store, in the database, representations of the unit of programmatic code, the service(s), and the association therebetween as discovered configuration items.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform. The software application may be configured to: obtain a unit of programmatic code from a third-party computing system, where the unit of programmatic code is hosted by the third-party computing system on behalf of the managed network, and where a program using the unit of programmatic code is executable by computing resources of the third-party computing system that are assigned on demand; parse the unit of programmatic code for a pattern indicative of respective relationships between the unit of programmatic code and service(s) provided by the third-party computing system; generate an association between the unit of programmatic code and the service(s); and store, in the database, representations of the unit of programmatic code, the service(s), and the association therebetween as discovered configuration items.

Abstract: A computing system includes a database and a discovery application. The discovery application obtains credentials for accessing a server hosting a software bus application which connects a plurality of applications within a managed network. The discovery application selects, based on a pattern corresponding to the software bus application, one or more files to access, transmits, to the server, instructions to access the one or more files, and receives therefrom data identifying a plurality of attributes of the software bus application. Based on this data, the discovery application transmits, to the server, instructions to identify communicative connections established between the plurality of software applications by way of the software bus application and receives therefrom data identifying the communicative connections.

Abstract: A computing system includes a database and a discovery application. The discovery application obtains credentials for accessing a server hosting a software bus application which connects a plurality of applications within a managed network. The discovery application selects, based on a pattern corresponding to the software bus application, one or more files to access, transmits, to the server, instructions to access the one or more files, and receives therefrom data identifying a plurality of attributes of the software bus application. Based on this data, the discovery application transmits, to the server, instructions to identify communicative connections established between the plurality of software applications by way of the software bus application and receives therefrom data identifying the communicative connections.

Abstract: A discovery application may obtain, from a remote storage system configured to host storage structures, first data that identifies relationships among the storage structures. The discovery application may generate, based on the first data, a mapping of the storage structures, store the mapping as one or more configuration items, and provide, to the remote storage system, instructions configured to cause the remote storage system to notify the discovery application of modification events associated with the storage structures. The discovery application may receive, from the remote storage system, a notification of a modification event associated with a particular storage structure of the storage structures and, in response, obtain, from the remote storage system, second data that identifies a modification to the particular storage structure. The discovery application may modify the mapping based on the second data and store the modified mapping by updating the one or more configuration items.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform and configured to: obtain, from an external computing system, information about a function-application arranged to execute source code segment(s) on demand; determine that the obtained information relates to (i) a plurality of authorization-keys each respectively arranged to authorize on-demand execution of one of the source code segments, (ii) a first key-value string pair that enables establishment of connectivity to a service of the external computing system or of another computing system, and/or (iii) a second key-value string pair that enables establishment of connectivity to a data source of the external computing system or of another computing system, and responsively determine association(s) between the source code segment(s), the function-application, the service, and/or the data source; and store the association(s) in t

Abstract: Breaches of service level agreements (SLAs) of a computer network can be identified based on changes to statuses of components of the computer network. A status of a component of the computer network can be determined to have changed responsive to an event affecting the computer network. The component can be determined to be included in a list of components used to meet conditions of the SLAs. A record of a task table can be updated according to the changed status of the component responsive to determining that the component is included in the list of components. Records of the task table are associated with ones of the SLAs. It can then be determined that the changed status of the component prevents a condition of an SLA associated with the updated record from being met. The SLA can be identified as breached responsive to that determination.

Abstract: Example embodiments for identifying and displaying configuration item information are presented herein. A system may involve a proxy server application disposed within a managed network that includes configuration items and a server disposed within a remote network management platform managing the managed network. The server may receive a request to view information representative of a particular configuration item from a client device. Based on the request, the server may obtain the information and transmit a representation of a graphical user interface to the client device. The representation may include a health graphic, a relationship graphic, a timeline graphic, and an activity stream, each of which represent pertinent information about the particular configuration item. The representation may also include a tabbed interface that facilitates navigation between attributes corresponding to the particular configuration item and attributes corresponding to other configuration items in the managed network.

Abstract: A computing system may include a proxy server application and a database. The proxy server application may provide, to a computing device disposed within a managed network, instructions to identify one or more processes executing on the computing device. The proxy server application may also determine, for a process of the one or more processes, a file system path of a directory associated with the process and, based thereon, select one or more directories to scan for files associated with the process. The computing device may be provided with instructions to (i) scan the one or more directories and (ii) determine a plurality of attributes associated with one or more files discovered therein. The proxy server application may additionally receive results of the scan containing a representation of the plurality of attributes and store, in the database, the results of the scan.

Abstract: Systems, methods, and media for finding configuration files are presented. Traffic-based connections may provide search parameter insight for searching a component for configuration data. The search parameters derived from the traffic-based connections may be used to facilitate discovery of configuration files in non-conventional locations. Further, Platform as a service (PaaS) components may be discovered using specialized pattern operations.

Abstract: A discovery application may obtain, from a remote storage system configured to host storage structures, first data that identifies relationships among the storage structures. The discovery application may generate, based on the first data, a mapping of the storage structures, store the mapping as one or more configuration items, and provide, to the remote storage system, instructions configured to cause the remote storage system to notify the discovery application of modification events associated with the storage structures. The discovery application may receive, from the remote storage system, a notification of a modification event associated with a particular storage structure of the storage structures and, in response, obtain, from the remote storage system, second data that identifies a modification to the particular storage structure. The discovery application may modify the mapping based on the second data and store the modified mapping by updating the one or more configuration items.

Abstract: Breaches of service level agreements (SLAs) of a computer network can be identified based on changes to statuses of components of the computer network. A status of a component of the computer network can be determined to have changed responsive to an event affecting the computer network. The component can be determined to be included in a list of components used to meet conditions of the SLAs. A record of a task table can be updated according to the changed status of the component responsive to determining that the component is included in the list of components. Records of the task table are associated with ones of the SLAs. It can then be determined that the changed status of the component prevents a condition of an SLA associated with the updated record from being met. The SLA can be identified as breached responsive to that determination.

Abstract: Systems, methods, and media for finding configuration files are presented. Traffic-based connections may provide search parameter insight for searching a component for configuration data. The search parameters derived from the traffic-based connections may be used to facilitate discovery of configuration files in non-conventional locations. Further, Platform as a Service (PaaS) components may be discovered using specialized pattern operations.

Abstract: A computer-implemented network diagnostics system includes a system management module, coupled to a communications network and a network accessible storage via a network interface of the system management module. The system management module is configured to direct a server to display a plurality of respective status indicators for a plurality of client resources of the communications network, identify one or more client resources of the plurality of client resources experiencing a functional impairment, apply an impact analysis framework to determine the functional impairment experienced by the one or more client resources of the plurality of client resources is causally related to a maintenance operation, and direct the server to update the respective status indicators associated with the one or more client resources of the plurality of client resources whose functional impairment is causally related to the maintenance operation to reflect that the respective client resource is undergoing maintenance.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform. The software application may be configured to: obtain a unit of programmatic code from a third-party computing system, where the unit of programmatic code is hosted by the third-party computing system on behalf of the managed network, and where a program using the unit of programmatic code is executable by computing resources of the third-party computing system that are assigned on demand; parse the unit of programmatic code for a pattern indicative of respective relationships between the unit of programmatic code and service(s) provided by the third-party computing system; generate an association between the unit of programmatic code and the service(s); and store, in the database, representations of the unit of programmatic code, the service(s), and the association therebetween as discovered configuration items.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform. The software application may be configured to: obtain a unit of programmatic code from a third-party computing system, where the unit of programmatic code is hosted by the third-party computing system on behalf of the managed network, and where a program using the unit of programmatic code is executable by computing resources of the third-party computing system that are assigned on demand; parse the unit of programmatic code for a pattern indicative of respective relationships between the unit of programmatic code and service(s) provided by the third-party computing system; generate an association between the unit of programmatic code and the service(s); and store, in the database, representations of the unit of programmatic code, the service(s), and the association therebetween as discovered configuration items.

Abstract: A computing system may include a database disposed within a remote network management platform that manages a managed network, and a software application associated with the platform and configured to: obtain, from an external computing system, information about a function-application arranged to execute source code segment(s) on demand; determine that the obtained information relates to (i) a plurality of authorization-keys each respectively arranged to authorize on-demand execution of one of the source code segments, (ii) a first key-value string pair that enables establishment of connectivity to a service of the external computing system or of another computing system, and/or (iii) a second key-value string pair that enables establishment of connectivity to a data source of the external computing system or of another computing system, and responsively determine association(s) between the source code segment(s), the function-application, the service, and/or the data source; and store the association(s) in t

Abstract: A computer-implemented network diagnostics system includes a system management module, coupled to a communications network and a network accessible storage via a network interface of the system management module. The system management module is configured to direct a server to display a plurality of respective status indicators for a plurality of client resources of the communications network, identify one or more client resources of the plurality of client resources experiencing a functional impairment, apply an impact analysis framework to determine the functional impairment experienced by the one or more client resources of the plurality of client resources is causally related to a maintenance operation, and direct the server to update the respective status indicators associated with the one or more client resources of the plurality of client resources whose functional impairment is causally related to the maintenance operation to reflect that the respective client resource is undergoing maintenance.

Abstract: Techniques related to bulk mapping network services are disclosed. The techniques include a system, comprising non-transitory memory devices, and hardware processors configured to execute instructions from the non-transitory memory devices to cause the system to determine a set of service entry point candidates for an organization based, at least in part, on network information received from load balancing servers, receive user input including a selection of a set of service entry points selected from the set of service entry point candidates, collect network information related to two or more service entry points of the set of service entry point candidates in parallel, the network information including returned errors associated with a respective service entry point, group the returned errors into category groups based on characteristics of the returned errors, and display the category groups on a display device for bulk resolution.