Abstract: A system and method for detecting an attack path in a computing environment is presented. The method includes: detecting a forensic artifact in a computing environment, the forensic artifact including an identifier of a resource deployed in the computing environment; inspecting the resource for a cybersecurity object, the cybersecurity object indicating a cybersecurity issue; generating a representation of: the detected forensic artifact, the resource, and the cybersecurity object, in a security database, wherein the security database includes a representation of the computing environment; generating a potential lateral movement path between the resource and another resource; and generating a visualization based on the potential lateral movement, the forensic artifact, and the cybersecurity object.

Abstract: A system and method for detecting a cybersecurity object in an operating system-level virtualization is presented. The method includes detecting an identifier of a code object in a software artifact, wherein the software artifact represents a software container deployed in a cloud computing environment; determining a location of the code object based on the software artifact; inspecting the code object for a cybersecurity object, wherein the cybersecurity object indicates a cybersecurity threat; detecting a cybersecurity object in the code object; and initiating a remediation action based on the cybersecurity object in response to detecting the cybersecurity object in the code object.

Abstract: A system and method for improving inspection of software containers deployed in a cloud computing environment is presented. The method includes detecting a plurality of configuration files, each configuration file corresponding to a software container deployed in the cloud computing environment; detecting a first plurality of commands in a first configuration file; generating a first fingerprint based on the first plurality of commands; detecting a second plurality of commands in a second configuration file; generating a second fingerprint based on the second plurality of commands; detecting a match based on the first fingerprint and the second fingerprint; and inspecting the first configuration file for a cybersecurity object in response to determining that the first configuration file matches the second configuration file.

Abstract: A system and method for detecting an attack path in a computing environment is presented. The method includes: detecting a forensic artifact in a computing environment, the forensic artifact including an identifier of a resource deployed in the computing environment; inspecting the resource for a cybersecurity object, the cybersecurity object indicating a cybersecurity issue; generating a representation of: the detected forensic artifact, the resource, and the cybersecurity object, in a security database, wherein the security database includes a representation of the computing environment; generating a potential lateral movement path between the resource and another resource; and generating a visualization based on the potential lateral movement, the forensic artifact, and the cybersecurity object.

Abstract: A system and method for improving inspection of software containers is presented.

Abstract: A system and method for detecting a cybersecurity object in an operating system-level virtualization is presented. The method includes detecting an identifier of a code object in a software artifact, wherein the software artifact represents a software container deployed in a cloud computing environment; determining a location of the code object based on the software artifact; inspecting the code object for a cybersecurity object, wherein the cybersecurity object indicates a cybersecurity threat; detecting a cybersecurity object in the code object; and initiating a remediation action based on the cybersecurity object in response to detecting the cybersecurity object in the code object.

Abstract: A system and method for detecting an attack path in a computing environment is presented. The method includes: detecting a forensic artifact in a computing environment, the forensic artifact including an identifier of a resource deployed in the computing environment; inspecting the resource for a cybersecurity object, the cybersecurity object indicating a cybersecurity issue; generating a representation of: the detected forensic artifact, the resource, and the cybersecurity object, in a security database, wherein the security database includes a representation of the computing environment; generating a potential lateral movement path between the resource and another resource; and generating a visualization based on the potential lateral movement, the forensic artifact, and the cybersecurity object.

Abstract: An online system determines that a mobile device of a user and content device are connected to the same local network. To determine whether the content device is associated with the user, the online system provides a token and network ports to the content device. The content device establishes a connection to the mobile device using a selected network port to send the token. Responsive to receiving the token from the mobile device, the online system determines that the devices are connected to the same local network. The online system may also determine that the devices are within physical proximity to each other. The online system may send content items to the devices, and the user may view or interact with the content items simultaneously on multiple devices. Thus, the mobile device or content device acts as a complementary “second screen” or “control device” for the other device.

Abstract: An online system determines that a mobile device of a user and content device are connected to the same local network. To determine whether the content device is associated with the user, the online system provides a token and network ports to the content device. The content device establishes a connection to the mobile device using a selected network port to send the token. Responsive to receiving the token from the mobile device, the online system determines that the devices are connected to the same local network. The online system may also determine that the devices are within physical proximity to each other. The online system may send content items to the devices, and the user may view or interact with the content items simultaneously on multiple devices. Thus, the mobile device or content device acts as a complementary “second screen” or “control device” for the other device.

Abstract: An online system determines that a mobile device of a user and content device are connected to the same local network. To determine whether the content device is associated with the user, the online system provides a token and network ports to the content device. The content device establishes a connection to the mobile device using a selected network port to send the token. Responsive to receiving the token from the mobile device, the online system determines that the devices are connected to the same local network. The online system may also determine that the devices are within physical proximity to each other. The online system may send content items to the devices, and the user may view or interact with the content items simultaneously on multiple devices. Thus, the mobile device or content device acts as a complementary “second screen” or “control device” for the other device.

Abstract: An online system determines that a mobile device of a user and content device are connected to the same local network. To determine whether the content device is associated with the user, the online system provides a token and network ports to the content device. The content device establishes a connection to the mobile device using a selected network port to send the token. Responsive to receiving the token from the mobile device, the online system determines that the devices are connected to the same local network. The online system may also determine that the devices are within physical proximity to each other. The online system may send content items to the devices, and the user may view or interact with the content items simultaneously on multiple devices. Thus, the mobile device or content device acts as a complementary “second screen” or “control device” for the other device.