Palantir Technologies Inc.

Alexandra Serenhov

Cem Zorlular

Barrett Brown

Xiao (Raymoond) Tang

Chuo Hao Yeo

Ihar Zalutski

Matthew Walsh

Ankit Shankar

Thomas Mathew

Gautam Punukollu

Elliot Colquhoun

Raj Krishnan

Andrew Eggleton

Morten Kromann

Brandon Helms

Ranec Highet

Nikhil Seetharaman

Xiao Tang

Darren Zhao

Simon Vahr

Sriram Krishnan

Brian Keohane

Tareq Alkhatib

A method, performed by one or more processors, including: receiving one or more event records; generating, using the one or more event records, an event descriptor object descriptive of one or more events occurring in a networked system, wherein the event descriptor object comprises a plurality of event properties; receiving one or more entity records; generating, using the one or more entity records, an entity descriptor object descriptive of one or more entities relevant to the security of the networked system, wherein the entity descriptor object comprises a plurality of entity properties; incorporating, into an object graph, the event descriptor object and the entity descriptor object; and associating, in the object graph, the event descriptor object with the entity descriptor object using at least one of the plurality of event properties and at least one of the plurality of entity properties.

System event detection system and method

A computer system may generate alerts related to a potential cyber attack an resource of an organization. The computer system may receive activity information associated with activity on a computer network of the organization, access contextual information about the resource, determine, based on the contextual information, select, based at least in part on the contextual information, one or more indicators that are indicative of a cyber attack against the resource to form a second plurality of indicators, and generate, based at least in part on the second plurality of indicators and the contextual information, a risk score, wherein the risk score indicates a probability that the resource is at risk of a cyber attack. In response to the risk score satisfying a threshold value, the computer system may generate an alert. Alerts may be presented using a graphical user interface. Analysts' actions may be tracked for review.

Resource-centric network cyber attack warning system

Growing community of inventors

Stockholm, Sweden

Alexandra Serenhov