Microsoft Technology Licensing, LLC

Amazon Technologies, Inc.

Benjamin Du

Parul Manek

Ganesh Pandey

Ayla Kol

Kameshwar Jayaraman

Yoganand Rajasekaran

Brijesh Bhupendra Desai

Zijun Hao

Mainul Mizan

Raquibur Rahman

Philip Ross Moyer

Md Humayun Arafat

Jong Hyun Lim

Md Omar Faroque

Ahad Rana

Melanie Sifen

A secure investigation platform in a sovereign cloud includes a request processing system that receives requests to investigate an incident. A control message processing system creates a workspace, within the sovereign cloud, so that an investigation can be conducted within that workspace. An investigation pack, which includes investigative resources used in the investigation, is identified and the workspace is pre-configured with the identified investigation pack. The control message processing system performs investigation tasks within the workspace using the investigation pack.

Secure incident investigation workspace generation and investigation control

Manifest files for proxies within an application mesh or service mesh are created using parallel computing. Virtual services in a mesh definition are identified. For each of the virtual services, one or more virtual nodes that receive traffic from the virtual service are identified. For each of the virtual nodes that receive traffic from the virtual service, an edge is added to a first graph. Virtual nodes that send network traffic to at least one of the virtual services are then identified. For each virtual node that sends traffic to the virtual service, an edge is added to a second graph. Then an optimized per node network topology is generated based at least in part on the first graph and the second graph.

Parallelized automated creation of proxy manifests

A secure investigation platform in a sovereign cloud includes a request processing system that receives requests to investigate an incident. A control message processing system creates a workspace, within the sovereign cloud, so that an investigation can be conducted within that workspace. The control message processing system performs investigation tasks within the workspace. A secure log generation system captures information corresponding to the tasks and generates an event record based on the captured information.

Secure incident investigation event capture

A secure investigation platform in a sovereign cloud includes a request processing system that is a user-facing system and receives requests to prepare for an incident investigation. A control message processing system creates a workspace, within the sovereign cloud, so that an investigation can be conducted within that workspace. The request processing system does not access the workspace and the control message processing system is not available for external access by a user. Data and functionality are ingested into the workspace. The control message processing system performs investigation preparation tasks within the workspace. The results of the investigation tasks are surfaced for user access.

Secure investigations platform

Growing community of inventors

Kenmore, WA, United States of America

Benjamin Du