Abstract: Examples described herein generally relate to a computer system including a knowledge graph storing a plurality of entities. A mining of a set of enterprise source documents within an enterprise intranet is performed, by a user-based mining system, to determine a plurality of entity names. An entity record is generated within a knowledge graph for a mined entity name from the linked entity names based on an entity schema and ones of the set of enterprise source documents associated with the mined entity name. The entity record includes attributes aggregated from the ones of the set of enterprise source documents associated with the mined entity name.

Abstract: Intent determination as a service (IaaS) is disclosed. A third party application may be provided access to an IaaS service. The third party application and the IaaS system may exchange or be provided registration data and information that allow configuration of data and interfaces used in provision of IaaS to the third party application. A query received as input at the third party application may be sent to the IaaS system and the intent of a query may be determined and indicated in a query response sent back to the third party application. A third party application may also interface with a device client application integrated into the operating system of a device as part of accessing an IaaS system. Use of IaaS for queries associated with or relevant to third party applications may extend the capabilities of the third party applications and device client applications.

Abstract: Methods and systems are provided for collaborative completion of tasks using task frames. Upon receiving a request to perform a task, a system utilizes task frames in completing the requested task. A task frame is a data structure that contains the parameters and status signals that represent a particular task and captures the combined system's understanding of a current state of the task. Input is received at a client device and sent to a server, where the input is processed. Based on the processed input, a task frame is retrieved and filled. The filled task frame is sent to the client device, where the client device performs actions based on the task frame and updates the task frame parameters and the state of the task. The updated task frame is returned to the server. The shared task frame provides improvements to the overall task completion process.

Abstract: A database management tool may migrate a portion of a constrained database by transferring the portion to a constraint-free database from a first constrained database, then populating a second constrained database using the constraint-free data. The constraint-free data may be transformed prior to populating to update internal database identifiers. In some cases, the transformation may also update the data to a different schema of the target database. The database management tool may also include a load balancer that may monitor the loads on a distributed database and may separate portions of the database to different database instances to more effectively load balance the larger database.

Abstract: Disclosed herein is a system and method for optimizing a cookie or token in a web service or other claims based domain system. A user presents an identity token to the domain system which verifies the identity claim as authentic and then determines what accounts the user has access to on the domain. The user is issued an intermediate token by the system which includes the locations of the accounts the user has access to. The user then selects the account they wish to interact with and receives an account token back to the user for the specific account, including any of the privileges the user has on the account. The account token also includes information that the user has multiple accounts on the domain. The user is able to switch accounts on the domain system without having to revalidate their credentials to the domain system.

Abstract: Methods and systems are provided for collaborative completion of tasks using task frames. Upon receiving a request to perform a task, a system utilizes task frames in completing the requested task. A task frame is a data structure that contains the parameters and status signals that represent a particular task and captures the combined system's understanding of a current state of the task. Input is received at a client device and sent to a server, where the input is processed. Based on the processed input, a task frame is retrieved and filled. The filled task frame is sent to the client device, where the client device performs actions based on the task frame and updates the task frame parameters and the state of the task. The updated task frame is returned to the server. The shared task frame provides improvements to the overall task completion process.

Abstract: Intent determination as a service (IaaS) is disclosed. A third party application may be provided access to an IaaS service. The third party application and the IaaS system may exchange or be provided registration data and information that allow configuration of data and interfaces used in provision of IaaS to the third party application. A query received as input at the third party application may be sent to the IaaS system and the intent of a query may be determined and indicated in a query response sent back to the third party application. A third party application may also interface with a device client application integrated into the operating system of a device as part of accessing an IaaS system. Use of IaaS for queries associated with or relevant to third party applications may extend the capabilities of the third party applications and device client applications.

Abstract: Disclosed herein is a system and method for optimizing a cookie or token in a web service or other claims based domain system. A user presents an identity token to the domain system which verifies the identity claim as authentic and then determines what accounts the user has access to on the domain. The user is issued an intermediate token by the system which includes the locations of the accounts the user has access to. The user then selects the account they wish to interact with and receives an account token back to the user for the specific account, including any of the privileges the user has on the account. The account token also includes information that the user has multiple accounts on the domain. The user is able to switch accounts on the domain system without having to revalidate their credentials to the domain system.

Abstract: An anti-malware system that reduces the likelihood of detecting a false positive. The system is applied in an enterprise network in which a server receives reports of suspected malware from multiple hosts. Files on hosts suspected of containing malware are compared to control versions of those files. A match between a suspected file and a control version is used as an indication that the malware report is a false positive. Such an indication may be used in conjunction with other information, such as whether other hosts similarly report suspect files that match control versions or whether the malware report is generated by a recently changed component of the anti-malware system.

Abstract: A database management tool may migrate a portion of a constrained database by transferring the portion to a constraint-free database from a first constrained database, then populating a second constrained database using the constraint-free data. The constraint-free data may be transformed prior to populating to update internal database identifiers. In some cases, the transformation may also update the data to a different schema of the target database. The database management tool may also include a load balancer that may monitor the loads on a distributed database and may separate portions of the database to different database instances to more effectively load balance the larger database.

Abstract: An anti-malware system that reduces the likelihood of detecting a false positive. The system is applied in an enterprise network in which a server receives reports of suspected malware from multiple hosts. Files on hosts suspected of containing malware are compared to control versions of those files. A match between a suspected file and a control version is used as an indication that the malware report is a false positive. Such an indication may be used in conjunction with other information, such as whether other hosts similarly report suspect files that match control versions or whether the malware report is generated by a recently changed component of the anti-malware system.