Splunk Inc.

Francis E Gerard

Sourabh Satish

Lucas Keith Murphey

Marios Iliofotou

Chinmay Madhav Kulkarni

Patrick Schulz

Amarendra Pendala

Robin Jinyang Hu

Sumit Singh Bagga

Richard Barger

J Evan Jordan

Bhavin Patel

A method comprises acquiring anomaly data including a plurality of anomalies detected from streaming data, wherein each of the anomalies relates to an entity on or associated with a computer network. The method determines a risk score of each of the anomalies, and adjusts the risk score of an anomaly according to a set of factors. The method further determines, for each of a plurality of sliding time windows of different lengths, an entity score of the entity in relation to the sliding time window, based on an aggregation of risk scores of all anomalies related to the entity that were detected within the sliding time window, where the entity score corresponds to a risk level associated with the entity. An action to prevent the entity from performing an operation can be determined and caused to occur based on the entity score.

Analysis and mitigation of network security risks

Techniques and mechanisms are disclosed for a data intake and query system to generate 'meta-notable' events by applying a meta-notable event rule to a collection of notable event data. A meta-notable event rule specifies one or more patterns of notable event instances defined by a set of notable event states and a set of transition rules (also referred to as association rules) indicating conditions for transitioning from one notable event state to another. The set of notable event states includes at least one start state and at least one end state. A meta-notable event is generated when a set of analyzed notable events satisfies a set of transition rules linking a start state to an end state (including transitions through any intermediary states between the start state and the end state).

Generating meta-notable event summary information

Cybersecurity risk analysis and mitigation

Systems and methods for detecting network security threat event patterns

Growing community of inventors

Oakland, CA, United States of America

Francis E Gerard