Splunk Inc.

Cisco Technology, Inc.

Daniel Trenkner

Allison Lindsey Drake

Ian Forrest

Kavita Varadarajan

Matthew Hanson

Jacob Davis

James Harris

Austin Tyler Hariri

Jacob Andrew Edward Moore

Zhi Peng Zhou

Shiying Tu

James Irwin Ebeling

Bhooshan Kulkarni

Orville Esoy

James Apger

Marquis L Montgomery

Described herein are techniques are provided for enabling a security orchestration, automation, and response (SOAR) service to automatically manage apps used to interface with an integrated security operations service and other related devices and services. Further described herein is a SOAR app generator service or application used to automate the creation of apps for a SOAR service based on application programming interfaces (API) specifications for related devices or services, as well as visual playbook editor interfaces for a SOAR service that enable the configuration of complex action input parameters including arrays and objects.

Automated security, orchestration, automation, and response (SOAR) service app management

Complex action parameter support in a visual playbook editor

A graphical user interface (GUI) for presentation of network security risk and threat information is disclosed. A listing is generated of incidents identified by use of event data obtained from a networked computing environment. A particular incident is determined to be associated with a risk object, wherein a risk object is a component of the networked computing environment. The listing is populated with a name associated with the risk object. Risk events associated with the incident are determined, wherein each risk event contributes to a risk score for the incident. The risk score indicates a potential security issue associated with the risk object. The listing is populated with the risk score and a summary of the events. An action is associated with the listing, for triggering display of additional information associated with the risk object. The listing can be displayed in a first display screen of the GUI.

Graphical user interface for presentation of network security risk and threat information

Automated security, orchestration, automation, and response (SOAR) app generation based on application programming interface specification data

Display screen or portion thereof having a graphical user interface for a process control editor

Display screen or portion thereof having an animated graphical user interface for dynamically formatting elements of a process control editor

A display is created and manipulated in connection with an event, such as a notable security event investigation. A plurality of activity indicators for the event are displayed in a time order using both horizontal and vertical directions. Each activity indicator corresponds to a an activity related to the event. A linear display of shapes is provided, each shape corresponding to one or more of the activity indicators, of the same type, in a time sequence. In response to a user action, the time period corresponding to the plurality of shapes is changed so that shapes corresponding to a new time period selected by the user are displayed. Also in response to this user action, only the activity indicators corresponding to the new time period selected by the user are displayed.

Interactive expandable histogram timeline module for security flagged events

Growing community of inventors

Encinitas, CA, United States of America

Daniel Trenkner