Splunk Inc.

Cisco Technology, Inc.

Jacob Davis

Matthew Hanson

James Harris

Daniel Trenkner

Kavita Varadarajan

Jacob Andrew Edward Moore

Shiying Tu

Zhi Peng Zhou

Austin Tyler Hariri

Ian Forrest

Sydney Flak

Jeffrey Roecks

Chieu Pham

Thomas Beardsley Bender

Jackson Tsoi

Mikhael Zharov

Pei Hsien Chu

David Shanley

Michael Combs

Dekel Shahaff

Navya Mehta

Sydney Karimi

Elton Xue

Described herein are techniques are provided for enabling a security orchestration, automation, and response (SOAR) service to automatically manage apps used to interface with an integrated security operations service and other related devices and services. Further described herein is a SOAR app generator service or application used to automate the creation of apps for a SOAR service based on application programming interfaces (API) specifications for related devices or services, as well as visual playbook editor interfaces for a SOAR service that enable the configuration of complex action input parameters including arrays and objects.

Automated security, orchestration, automation, and response (SOAR) service app management

Techniques are described for providing a software-based platform used to collect and analyze data artifacts generated during software development processes and to display results of the analyses as actionable information. The software development observability platform is a software-based agent (also referred to as an 'artifact collector') capable of capturing output from a wide variety of software development tools including compilers, test frameworks, code coverage and type checker tools, and the like. The artifact collector stores the data in an event data format and forwards the data to a data intake and query system or other destination for further analysis. In some examples, the software development observability platform further includes graphical user interfaces (GUIs) and other analysis tools that enable users to obtain insights into their software development processes.

Software development observability platform

Complex action parameter support in a visual playbook editor

Techniques are described for providing a built-in 'app' editor for an information technology (IT) and security operations application that enables users to create, modify, and test operation of apps under development within the editor. Some IT and security operations applications enable users to extend the applications by adding connectivity to third party technologies to run custom actions. For example, a user might create a custom app to enable an IT and security operations application to connect to an external service providing information about malicious Internet Protocol (IP) addresses, to connect to a relevant cloud provider service, or to interact with a firewall or other type of computing device used in a user's computing environment. Given the broad set of technologies that can be orchestrated by an IT and security operations application, apps broadly enable users to add custom functionality to interface with virtually any technology of interest.

Live app testing within an app editor for an information technology and security operations application

Automated security, orchestration, automation, and response (SOAR) app generation based on application programming interface specification data

Growing community of inventors

Campbell, CA, United States of America

Jacob Davis