Abstract: Systems and methods, in a lightweight connector including a processor communicatively coupled to a network interface, include connecting to a cloud-based system, via the network interface; connecting to one or more of a file share and an application, via the network interface; and providing access to a user device to the one or more of the file share and the application via a stitched connection between the network interface and the user device through the cloud-based system. The systems and methods can further include receiving a query for discovery; and responding to the query based on the one or more of the file share and the application connected thereto.

Abstract: A fraud detection system for detecting fraudulent acts related to payment discounts from digital transactional data is disclosed. In some embodiments, the fraud detection system is programmed or configured with data structures and/or database records that are arranged to detect an occurrence of a triggering event, such as receiving an early payment discount by a buyer account from a supplier account. The fraud detection system is programmed to analyze how a first amount charged for certain items by the supplier account to the buyer account before the triggering event has changed to a second amount after the triggering event from digital documents related to procurement transactions. The certain items may include items for sale or for other miscellaneous items. The digital documents may include catalogs, purchase requisitions, purchase orders, or invoices. The fraud detection system is programmed to further detect any potential fraud committed by the supplier account based on the analysis result.

Abstract: In various embodiments, a process for providing a distributed streaming system supporting real-time sliding windows includes receiving a stream of events at a plurality of distributed nodes and routing the events into topic groupings. The process includes using one or more events in at least one of the topic groupings to determine one or more metrics of events with at least one window and an event reservoir including by: tracking, in a volatile memory of the event reservoir, beginning and ending events within the at least one window; and tracking, in a persistent storage of the event reservoir, events associated with tasks assigned to a respective node. The process includes updating the one or more metrics based on one or more previous values of the one or more metrics as a new event is added or an existing event is expired from the at least one window.

Abstract: A method for providing searchable media content includes generating a text file that is representative of an instance of media content. The instance of media content comprises a first scene and a second scene. A first portion of the text file is representative of the first scene and a second portion of the text file is representative of the second scene. The method further includes indexing the first portion with the first scene and indexing the second portion with the second scene.

Abstract: An information processing device includes: a request queue that stores a request for IO processing; a response queue that stores a response that makes notification of completion of the IO processing; an IO device that obtains the request from the request queue, executes the IO processing instructed by the obtained request, and stores the response in the response queue after the completion of the IO processing; a first processing unit that writes a request to the request queue after saving context that is information that indicates an operation state of the first processing unit; and a second processing unit that polls the response queue, detects storage of the response in the response queue, obtains the response from the response queue, and notifies the first processing unit of the completion of the IO processing.

Abstract: The present disclosure describes how to capture events (e.g., changes and user interactions) of a Web document and combine those changes with the original DOM displayed to accurately and efficiently enable a replay engine to redisplay the DOM, changes, and user interactions which occurred within a user's browser. The data collected from a client-side HTML DOM capture engine can be combined with a minimal amount of contextual information to a replay engine so as to accurately and efficiently replay a session of a plurality of web documents.

Abstract: Example implementations relate to alerts for virtual meetings. In some examples, a computing device can include a processor, where the processor is to in response to a virtual meeting having been initiated, determine whether a graphical user interface of the virtual meeting is minimized in a desktop environment and whether communication has occurred in the virtual meeting, and in response to communication having occurred and the graphical user interface being minimized, cause an alert to be displayed on a display panel.

Abstract: A method can include rendering a graphical user interface (GUI) to a display where the GUI includes graphical controls that correspond to windows and objects of a computational framework and a windows builder panel; responsive to receipt of instructions via the graphical controls, generating specifications for the windows and the objects; and storing the specifications for the windows and the objects as a template file.

Abstract: Techniques are disclosed relating to the execution of a set of program instructions in the background. A parent environment of an application executing on a computer system may receive a request from a first child environment within the parent environment to execute a set of program instructions. The first child environment does not permit the set of program instructions to be executed within the first child environment while the application is backgrounded. In response to the request, the parent environment may spawn a second child environment within the parent environment that permits the set of program instructions to be executed while the application is backgrounded. The parent environment may cause the set of program instructions to be executed within the second child environment and may return a result of the executing to the first child environment.

Abstract: Systems and methods are provided for displaying messages. The systems and methods include operations for: receiving, by a client device, a plurality of events from a plurality of channels; receiving, by the client device from a server, a configuration file comprising one or more rules for processing the sets of events from the plurality of channels; determining that a first event of the plurality of events is associated with a first event type and that a second event of the plurality of events is associated with a second event type; assigning, based on the configuration file, a first priority to the first event based on the first event type and a second priority to the second event based on the second event type; and displaying, by the client device, the first event and the second event according to the first priority and the second priority.

Abstract: A method includes storing a detected event code in a first blockchain, wherein each electronic control unit (ECU) in a plurality of ECUs in a vehicle includes a first blockchain node of the first blockchain; determining a validity of each first blockchain node of the first blockchain by determining that the event code is one of (a) stored in the respective first blockchain node of the first blockchain and valid or (b) not stored in the respective first blockchain node of the first blockchain and invalid; and providing the event code and the validity of each first blockchain node of the first blockchain to a second blockchain maintained at least one second blockchain node via a network outside the vehicle.

Abstract: A system and method receives a request for an event that is not fully specified, and predicts sufficient details of the event to instruct a hardware distributor to route the request to an agent that can handle the predicted request.

Abstract: Implementations set forth herein relate to intervening notifications provided by an application for mitigating computationally wasteful application launching behavior that is exhibited by some users. A state of a module of a target application can be identified by emulating user inputs previously provided by the user to the target application. In this way, the state of the module can be determined without visibly launching the target application. When the state of the module is determined to satisfy criteria for providing a notification to the user, the application can render a notification for the user. The application can provide intervening notifications for a variety of different target applications in order to reduce a frequency at which the user launches and closes applications to check for variations in target application content.

Abstract: Disclosed are hardware and techniques for correcting computer process faults by identifying risk associated with correcting a computer process fault and computer processes that may depend on the corrected computer process. The interdependent computer processes in a network may be determined by evaluating a stream of process break flags from a monitoring component coupled to the network. Each computer process break flag in the stream of computer process break flags indicates a process fault detected by the monitoring component and is correlated to a corrective response. The break flag and the corrective response are assigned a risk. A risk matrix accounts for interdependencies between computer processes and identified corrective actions. A final response strategy that corrects the computer process faults is determined using the assigned risk and computer system interdependence.

Abstract: A system can system can parse a first group of dependencies within a first API, and second group of dependencies between the first API and a second API. The system can identify a group of assertions for the first API. The system can identify a group of validations for the first API. The system can identify a format for calls to the first API according to a first programming language based on a template for the first programming language. The system can generate a number of test cases that invoke the first API according to the first programming language based on the first group of dependencies, the second group of dependencies, and the format for calls to the first API. The system can invoke the first API with the test cases to validate functionality of the first API based on the group of assertions and the group of validations.

Abstract: Disclosed is a mobile terminal including a display and a processor, wherein the processor receives a first input related to displaying a notification user interface (UI) on a first area of the display in which first content is displayed and displays a notification UI in a second area of the display distinguished from the first area in response to the first input when a setting related to displaying the notification UI of the first content corresponds to a first setting.

Abstract: A compilation system can define, at compile time, the data blocks to be managed by an Even Driven Task (EDT) based runtime/platform, and can also guide the runtime/platform on when to create and/or destroy the data blocks, so as to improve the performance of the runtime/platform. The compilation system can also guide, at compile time, how different tasks may access the data blocks they need in a manner that can improve performance of the tasks.

Abstract: A group-based communication platform is configured to initialize processing actions executable via validated external resources. Moreover, the group-based communication platform may recommend specific processing actions to a user based at least in part on the user's activity in interacting with the group-based communication platform (e.g., via a client device), wherein such activity may be represented as environmental contextual data. Moreover, once the user selects a particular processing action for execution, the group-based communication retrieves at least a portion of the generated environmental contextual data to be passed to the validated external resource for use in executing the selected processing action.

Abstract: Disclosed in some examples are methods, systems, and machine readable mediums which provide for customized alerts for a user. Alerts may be described by a set of alert parameters. Alert parameters include the type of alerts, the frequency of alerts, and the content of the alerts. While the alert parameters may initially be set based upon the users explicitly entered preferences, the system may monitor one or more indicators to dynamically adjust one or more of the alert parameters. As the indicators allow the automated portfolio management system to respond to the needs of a user, these alerts may increase the personalization of automated portfolio management systems.

Abstract: A method and apparatus for automatically deploying artifacts are disclosed. In one embodiment, the method comprises generating a trusted configuration artifact with a forward immutable continuous integration (CI) implemented as a build pipeline; accessing, by an orchestration system, the trusted configuration artifact from the IAC repository; and automatically deploying the configuration to change a state of the cluster, according to an orchestration type associated with the trusted configuration artifact, including determining the orchestration type.

Abstract: This disclosure relates to methods, non-transitory computer readable media, and systems that relay domain-event objects within an enhanced multi-platform data stream to listen for and react to digital events indicated by the domain-event objects that occur across a wide variety of computing platforms. Specifically, the disclosed systems can receive domain-event objects within the multi-platform data stream. From among the domain-even objects transmitted through the multi-platform data stream, the disclosed systems can identify a domain-event object that is relevant to a digital-analytics platform by identifying domain-event objects that include properties satisfying domain-event-listener rules. Based on an entity identifier and an object event from the relevant domain-event object, the disclosed systems can perform a platform action within the digital-analytics platform (e.g., to react to a change in another platform as indicated by the domain-event object).

Abstract: A computer-implemented method of providing unified event monitoring and log processing is disclosed. The method comprises receiving streaming event data comprising a plurality of event entries from a plurality of domains including a cloud manager for a cloud platform and an application running within a container on the cloud platform; processing the streaming event data into a normalized, domain-independent format; evaluating a plurality of policy rules on the streaming event data, wherein the plurality of policy rules is defined with a unified syntax; and in response to the evaluating satisfying a condition of a first rule of the plurality of policy rules, transmitting to a remote device data related to an action defined in the first rule, wherein the receiving, processing, evaluating, and transmitting for each event entry for the plurality of event entries are performed in real time.

Abstract: Computer-readable media, methods, and systems are disclosed for copying tenant data within a cloud-based microservice architecture including a Kubernetes cluster. Copy tasks are generated for a plurality of microservices and progress of the copy tasks is monitored by updating one or more statuses associated with the copy tasks. One or more job files may be generated for each microservice including executable code for copying the tenant data within the microservice or within a data store associated with the respective microservice.

Abstract: A method of generating metrics data associated with a microservices-based application comprises ingesting a plurality of spans and mapping an ingested span of the plurality of spans to a span identity, wherein the span identity comprises a tuple of information identifying a type of span associated with the span identity, wherein the tuple of information comprises user-configured dimensions. The method further comprises grouping the ingested span by the span identity, wherein the ingested span is grouped with other spans from the plurality of spans comprising a same span identity. The method also comprises computing metrics associated with the span identity and using the metrics to generate a stream of metric data associated with the span identity.

Abstract: A system for improving a query response includes an interface and a processor. The interface is configured to receive a query. The processor is configured to determine a categorization for the query using a model. The categorization is associated with a confidence value. The processor is configured to a comparison of the confidence value and a first threshold, wherein the first threshold is determined to maximize a metric and modify the query response based at least in part on the categorization and the comparison.

Abstract: A multi-processor mobile computing device includes a first processor connected to a first operating memory and a mobile display and powered by a portable power source integrated into the multi-processor mobile computing device, a second processor connected to a second operating memory and a display input-output port; the second processor is activated only when mobile device is connected to an external power source. The device includes a dual-function operating system, including a mobile operating system module operating on the first processor, the mobile operating system module having a first capability set and a desktop operating system module operating on the second processor; the desktop operating system module having a second capability set, wherein the second capability set differs from the first capability set.

Abstract: A new snapshot of a storage volume is created by instructing computing nodes to suppress write requests. A snapshot of the application may be created and used to rollback or clone the application. Clones snapshots of storage volumes may be gradually populated with data from prior snapshots to reduce loading on a primary snapshot. Components of cloned applications may communicate with one another using addresses of these components in the parent application. Jobs implementing a bundled application may be referenced with a simulated file system that generates reads to hosts only when the job log file is actually read. Job logs and a job hierarchy may be used to perform root cause analysis. Job logs may be for tasks such as creating the bundled application, cloning, rolling back, backing up, scaling out, scaling in, deleting, pruning unused application images, or the like.

Abstract: A system performs cloud-based fire protection. The system receives, by a cloud platform, data from one or more initiating devices. The system stores the data in a persistent data storage of the cloud platform over a period of time. The system applies machine learning to the data to build or adjust a predictive detection model. The system processes, by computing resources of the cloud platform, the data using the predictive detection model to determine an existence of a safety event. The system then transmits, to at least one notification device, an event notification in response to the existence of the safety event.

Abstract: Representative apparatus, method, and system embodiments are disclosed for a self-scheduling processor which also provides additional functionality. Representative embodiments include a self-scheduling processor, comprising: a processor core adapted to execute a received instruction; and a core control circuit adapted to automatically schedule an instruction for execution by the processor core in response to a received work descriptor data packet. In another embodiment, the core control circuit is also adapted to schedule a fiber create instruction for execution by the processor core, to reserve a predetermined amount of memory space in a thread control memory to store return arguments, and to generate one or more work descriptor data packets to another processor or hybrid threading fabric circuit for execution of a corresponding plurality of execution threads. Event processing, data path management, system calls, memory requests, and other new instructions are also disclosed.

Abstract: Representative apparatus, method, and system embodiments are disclosed for a self-scheduling processor which also provides additional functionality. Representative embodiments include a self-scheduling processor, comprising: a processor core adapted to execute a received instruction; and a core control circuit adapted to automatically schedule an instruction for execution by the processor core in response to a received work descriptor data packet. In another embodiment, the core control circuit is also adapted to schedule a fiber create instruction for execution by the processor core, to reserve a predetermined amount of memory space in a thread control memory to store return arguments, and to generate one or more work descriptor data packets to another processor or hybrid threading fabric circuit for execution of a corresponding plurality of execution threads. Event processing, data path management, system calls, memory requests, and other new instructions are also disclosed.

Abstract: In an approach for building a machine learning model that predicts the appropriate action to resolve a malfunction or system error, a processor receives an alert that a malfunction or a system error has occurred. A processor creates a workspace on a ChatOps platform integrated with a chatbot and one or more tools. A processor inputs data relating to the alert in a natural language format. A processor processes the data using a natural language processing algorithm. Responsive to determining a pre-set threshold for outputting the appropriate action is not met, a processor establishes a conversation between two or more support service agents in the workspace. A processor monitors the conversation using the natural language processing algorithm. A processor analyzes a transcript of the conversation using text analytics or pattern matching. A processor creates and trains a machine learning model to predict the appropriate action in future iterations.

Abstract: Representative apparatus, method, and system embodiments are disclosed for a self-scheduling processor which also provides additional functionality. Representative embodiments include a self-scheduling processor, comprising: a processor core adapted to execute a received instruction; and a core control circuit adapted to automatically schedule an instruction for execution by the processor core in response to a received work descriptor data packet. In another embodiment, the core control circuit is also adapted to schedule a fiber create instruction for execution by the processor core, to reserve a predetermined amount of memory space in a thread control memory to store return arguments, and to generate one or more work descriptor data packets to another processor or hybrid threading fabric circuit for execution of a corresponding plurality of execution threads. Event processing, data path management, system calls, memory requests, and other new instructions are also disclosed.

Abstract: Representative apparatus, method, and system embodiments are disclosed for a self-scheduling processor which also provides additional functionality. Representative embodiments include a self-scheduling processor, comprising: a processor core adapted to execute a received instruction; and a core control circuit adapted to automatically schedule an instruction for execution by the processor core in response to a received work descriptor data packet. In another embodiment, the core control circuit is also adapted to schedule a fiber create instruction for execution by the processor core, to reserve a predetermined amount of memory space in a thread control memory to store return arguments, and to generate one or more work descriptor data packets to another processor or hybrid threading fabric circuit for execution of a corresponding plurality of execution threads. Event processing, data path management, system calls, memory requests, and other new instructions are also disclosed.

Abstract: Techniques for generating plug-in application recipe (PIAR) extensions are disclosed. A PIAR management application discovers a particular data type within one or more data values for a particular field of a plug-in application, where the particular data type is (a) different from a data type of the particular field as reported by the plug-in application and (b) narrower than the data type of the particular field while complying with the data type of the particular field. The PIAR management application identifies one or more mappings between (a) the particular data type and (b) one or more data types for fields accepted by actions of plug-in applications. The PIAR management application presents a user interface including one or more candidate PIAR extensions based on the mapping(s). Based on a user selection of a candidate PAIR extension, the PIAR management application executes a PIAR that includes the selected PIAR extension.

Abstract: Predictive rendering (also referred to herein as speculative rendering) is disclosed. The predictive rendering is performed by an endpoint browser in response to a user input made by a user. The predictive rendering is verified using a surrogate browser that is executed on a remote server. The verification can be performed asynchronously.

Abstract: Systems, computer-implemented methods, and computer-readable media for facilitating resource balancing based on resource capacities and resource assignments are disclosed. Electronic communications, received via interfaces, from monitoring devices to identify resource descriptions of resources may be monitored. A resource descriptions data store may be updated to associate each entity of the entities and resource capacities of each resource type of resource types. A first electronic communication, from resource-controlling systems, may be detected. Model data from a model data store may be accessed based on the identified resource descriptions. A first model may be identified based on the model data. A resources assessment corresponding may be generated based on whether a threshold is satisfied based on the first model, a first resource capacity of a first resource type, and the first electronic communication.

Abstract: An apparatus for determining candidate causes of a user experience degradation includes a data collection agent to collect inventory data associated with a managed computer system, a change recording system to process the inventory data and determine any changes and to record change records including time-stamps, an alert detection system to detect alerts (alarms and sensors) including time-duration information and storing alert records, an analysis module to select alert records based on whether the alert, using the time-duration information, occurred in a predetermined lookback period, and identify, for each selected alert records, corresponding change records that precede in time the selected alert records. A user reporting interface outputs the identified change records as the candidate causes.

Abstract: If processing of a first event in response to a stream event is not normally ended due to an occurrence of an exception or a timeout, the processing is executed repeatedly during a predetermined period of time from an occurrence of the first event. Then, after the predetermined period of time passes, an error notification is issued while processing of a second event that has occurred during the predetermined period of time is executed only once.

Abstract: The purpose of the present invention is to enable even an unskilled person to easily identify a related event in a short time from a collected event log. A system management device (1) is provided with: a display control part (32) for causing a display part (14) to display an event log; an identification part (30) for identifying an event of interest log specified by a user through an operation part (11); and an extraction part (31) for extracting a related event log related to an event of interest from an event log database (20). The display control part (32) causes the display part (14) to display the event of interest log and the related event log.

Abstract: An electronic device according to various embodiments comprises: a housing; a mounting structure connected to the housing; a touchscreen display; an input interface; a processor operatively connected to the touchscreen display and the input interface; a volatile memory operatively connected to the processor; and a nonvolatile memory operatively connected to the processor, wherein the nonvolatile memory is configured to store a plurality of application programs, and may store instructions which, when executed, enables the processor to receive, from an external electronic device, data including association information between a user-related event and one or more of the application programs, store the data in the nonvolatile memory, detect the user-related event, and load the one or more application programs into the volatile memory, while a user interface of the application program is not displayed on the touchscreen display. Other embodiments are also possible.

Abstract: Embodiments minimize downtime involved in moving a PDB between CDBs by allowing read-write access to the PDB through most of the moving operation, and by transparently forwarding connection requests, for the PDB, from the source CDB to the destination CDB. The files of a source PDB are copied from a source CDB to a destination CDB, during which the source PDB may be in read-write mode. The source PDB is then closed to write operations so that changes to the source PDB cease. Another round of recovery is performed on the PDB clone, which applies all changes that have been performed on the source PDB during the copy operation and the PDB clone is opened for read and write operations. Forwarding information is registered with the source location, which information is used to automatically forward connection requests, received at the source location for the moved PDB, to the destination location.

Abstract: A system for real time cohort creation of entities based on entity attributes derived from partially observable location data is provided. The system (i) obtains, in real time, one or more data streams from one or more independently controlled entity sources that include a unique entity identifier, entity attributes, time-stamp data, location indexed data (ii) de-duplicates the one or more data streams associated with an entity by analyzing the entity attributes associated with the unique entity identifier, (iii) classifies a unified entity event from the one or more data streams along with dynamic entity attributes retrieved from a memory store, and storing the dynamic attributes in an entity attribute document of the entity (iv) reverse searches, to match the entity attribute document with at least one query (v) generates entity cohorts based on the matched entity attribute document of the entities with at least one cohort labels and communicates a target media content to the entity cohorts over a network.

Abstract: The present disclosure relates generally to internet social media, and more specifically to techniques for determining location-related information about internet social media content. In some embodiments, a system accesses data representing a first social media post, the data including geographic location data identifying a first geographic location. The system identifies a second social media post related to the first post. The system accesses data representing the second social media post, wherein the data representing the second post does not include geographic location data identifying the first geographic location. The system analyzes the data representing the second social media post and determines a location score based at least in part on the analysis of the data representing the second social media post. If the location score exceeds a threshold location score, the system associates the second social media post with the first geographic location.

Abstract: Disclosed are an electronic device for providing graphical content and a method for controlling same. The electronic device configured to obtain graphical content from a first external device using the communication module, wherein the graphical content includes type information relating to an application which can use the graphical content; confirm at least one application corresponding to the type information from among the plurality of applications, and provide notification information relating to obtaining the graphical content through the at least one application.

Abstract: A method and system for event consumers management are described. A batch of events that is stored in an event recordation system according to an aggregate topic is received based on the aggregate topic. Each event from the batch of events is associated with an initial topic to be used by a respective instance of an event consumer from a set of event consumers to consume events. A first initial topic associated with one or more events from the batch of events is determined. Based on the first initial topic, a state of a first event consumer is updated to a running state. The updated state of the first event consumer causes execution of a first instance of the first event consumer on a server of a cluster of servers for consuming events from the event recordation system based on the first initial topic.

Abstract: An apparatus includes a display and a processor. The processor receives a refund request, which includes a request for a refund of a price of an item charged to an account belonging to a person, and information identifying a shopping session of the person in a physical store. In response to receiving the refund request, the processor locates a video segment captured during the shopping session and stored in a database. The processor displays the video segment, which depicts a scenario indicating that the person did not select the item for purchase during the shopping session. The processor further receives information indicating that the person did not select the item for purchase during the shopping session. The information is based at least in part on the video segment. In response to receiving the information, the processor credits the account belonging to the person with the price of the item.

Abstract: The ability to comprehend the context of a given programming artifact and extracting the underlying functionality is a complex task extending beyond just syntactic and semantic analysis of code. All existing automation capabilities, hence heavily depend on manual involvement of domain experts. Even recent approaches leveraging Machine Learning Capabilities are supervised techniques, whereby the dependency on domain experts still remains—in preparing suitable training sets. A method and system for automated classification of variables using unsupervised distribution agnostic clustering has been provided. The present disclosure focuses to tap the flexibility of the code and presents a domain agnostic approach using unsupervised machine learning which automatically extracts the context from source code, by classifying the underlying elements of the code. The method and system do not require any manual intervention and opens a wide range of opportunities in reverse engineering and variable level analysis space.

Abstract: A data store item count process determines the number of items in a data store (e.g., the number of items in a database table). In response to receipt of triggering events (e.g., additions or deletions of items in a table), a function registered to process the events is launched. The function processes the events to identify a net change to a count of items, and updates a value in a data store based on the net change. Multiple functions may process events for respective sets of partitions of a table, or for respective sets of tables, and update a distinct count value for each partition or table. In some instances, the process is performed within the context of a serverless compute environment; the function may retire, without saving an execution state for the function. A reporting function may access the value and send the value to a metrics reporting service.

Abstract: A computer-implemented method may comprise providing a first executed agreement cache in a first data center and a second executed agreement cache in a second data center; receiving agreements on proposals to create or make changes to files stored in the first and second data centers; storing metadata of the files referred to by the received agreements the first and/or second executed agreement caches; maintaining the first and second executed agreement caches synchronous with one another before the files referred to by the received agreements are created or changed; creating or making changes to the file referred to by the received agreements only after the first and second executed agreement caches have been synchronized; and searching the first and/or second executed agreement caches for updated metadata whenever requests for data of files stored in the first or second data centers are received in the first or the second data centers and, responsive to the received requests, providing data corresponding to

Abstract: A new approach is proposed to support generating and presenting to a user cyber attack monetary impact estimation of a current or future cyber attack, which is used to stop monetary losses or to mitigate monetary impacts. First, both historic data and real time data on monetary impact of current and/or potential cyber attacks is continuously collected from a plurality of data pools. The collected data is then synchronized, correlated and filtered/cleansed once the data is available to create fidelity among the data from the plurality of data pools. The cyber attack monetary impact is calculated based on the correlated and cleansed data, and is presented to the user along with one or more suggested applications by the user in response to the cyber attack monetary impact, to mitigate the monetary impact of the current or future cyber attack.