Microsoft Technology Licensing, LLC

Riskiq, Inc.

Brandon Dixon

Chris Kiernan

Jonas Edgeworth

Elias Manousos

Jonathan Matkowsky

Stephen Ginty

Adam Hunt

Sunder Srinivasan

Brian Zak

Beckie Neumann

Andrew Kant

Techniques are disclosed of enabling projects to be managed for grouping artifacts about related network activity. A graphical interface can be provided to enable users to create both public and private projects with information including names, descriptions, collaborators and monitoring profiles. A project can include context and history of the project so multiple users can collaborate within a project to view the analysis process as assets are identified in the project. Information is retrieved for identified assets in separate projects and is available for display in the graphical interface.

Techniques for managing projects and monitoring network-based assets

An inventory of Internet-facing assets related to a target domain is generated using network data gathered from network data sources. Using data sources of known threats, such as malware, phishing attempts, scam pages, blacklisted sites, and so on, a network analytic system generates analytical information about domains, sub-domains, and components that are owned, managed, and/or controlled by a target entity. A confidence score of ownership is generated based on a recursive rule engine. A visual representation of the inventory of Internet-facing assets is generated in a graphical user interface.

Interactive display of a confidence-based graph of internet related assets

Some embodiments are directed to techniques for infrastructure analysis of Internet-based activity. Techniques are disclosed to enable analysts to spend more time focusing on analyzing and identifying threats to in a network infrastructure, and little time on data collection and data processing. Specifically, techniques are described for identifying network data relevant to Internet activity and providing an interactive interface (e.g., a 'heat map' interface) for viewing and interactive analysis of the network data. The network data may be identified for assessing Internet activity with respect to one or more attributes, such as an Internet domain name or an Internet protocol (IP) address.

Techniques for infrastructure analysis of internet-based activity

Growing community of inventors

San Francisco, CA, United States of America

Brandon Dixon