Abstract: Methods, systems, and computer storage media for providing data security posture management using an application discovery engine in a security management system. Application discovery supports identifying and mapping various applications within a computing environment. In particular, application discovery can be provided as part of security management operations to assess security posture of applications, identify vulnerabilities, and ensure compliance with regulations. In operation, application discovery data associated with a plurality computing resources of a computing environment is accessed. An annotated application discovery graph comprising a plurality of entities that represent the plurality of computing resources is generated. The annotated application discovery graph is deployed to support generating security postures for computing environments. A request is received for a security posture of the computing environment.

Abstract: Methods, systems, and computer storage media for providing context-based attack disruption using a contextual attack disruption engine of a security management system are described. Context-based attack disruption refers to attack disruption planning that allows for a comprehensive consideration of both contextual factors influencing a security incident and the broader impact to a computing environment for a security management system. The contextual attack disruption engine supports prioritizing and addressing security incidents based on context and impact of security incidents in computing environments. In operation, a security incident associated with a computing environment is identified. A security incident predictive model analysis associated with a plurality of attacks paths is generated. An attack path context for a predicted attack path is generated. A security incident impact analysis for the predicted attack path is generated. An attack disruption plan is generated.

Abstract: Methods, systems, and computer storage media for providing data security posture management using an application discovery engine in a security management system. Application discovery supports identifying and mapping various applications within a computing environment. In particular, application discovery can be provided as part of security management operations to assess security posture of applications, identify vulnerabilities, and ensure compliance with regulations. In operation, application discovery data associated with a plurality computing resources of a computing environment is accessed. An annotated application discovery graph comprising a plurality of entities that represent the plurality of computing resources is generated. The annotated application discovery graph is deployed to support generating security postures for computing environments. A request is received for a security posture of the computing environment.