Symantec Corporation

Splunk Inc.

Anne Yeh

Sourabh Satish

Jeffery Roberts

Harlan Seymour

Benjamin Yeung

Techniques are described for providing on-premises action execution agents used to execute orchestration, automation, and response (OAR) actions in users' IT environments. An on-premises action execution agent can be used to execute actions involving computing resources located in users' on-premises IT environments, where such resources may be located behind a firewall and thus not directly accessible to an IT and security operations application running in a cloud-based environment or elsewhere. An intermediary secure tunnel service is used to establish secure connections between an IT and security operations application and on-premises action execution agents, thereby enabling the encrypted transfer of credentials, API tokens, and other sensitive information used by an on-premises action execution agent to execute actions. The executed actions can include on-demand actions initiated by a user and automated actions included, e.g., as part of a playbook that is executed responsive to the identification of certain types of incidents.

On-premises action execution agent for cloud-based information technology and security operations applications

Computer implemented methods, apparati, and computer-readable media for empirically adjusting access to a database (). An apparatus embodiment comprises: coupled to the database (), a database discovery module () for determining authorized accesses to the database (); coupled to the database (), a command monitoring module () for monitoring actual accesses to the database (); and coupled to the database discovery module () and to the command monitoring module (), an analysis module () for comparing actual accesses with authorized accesses.

Growing community of inventors

Fremont, CA, United States of America

Anne Yeh