Palantir Technologies Inc.

Michael Glazer

Robin Lim

Spencer Tank

Mitchell Beard

Ezra Spiro

Juan Ricafort

Paul Ryan

Aakash Goenka

David Karesh

Brian Dorne

Tristan Huber

Youssef Moussaoui

Alexander Vasilyev

Alan Pierce

Daniel Robinson

Sina Iman

Mark Basoa

Bonnie McLindon

Dylan Davis

Glenn Sheasby

Nick White

Matthew Dailey

John Boreiko

Mark Lundquist

Derek Rabideau

Hongyi Yao

Lucas Lemanowicz

Timothy Yousaf

Richard Allen Ducott, Iii

Joseph Staehle

Matthew Falk

Sebastien Noury

Arjun Mody

Gabriele Fisher

A computer-implemented method comprises receiving, by a processor, search requests to search a database; receiving a reindex request to reindex information in the database based on a new ontology for the database or a new number of shards for a first index server; initiating, by the processor, generation of a second index for the database while a first index managed by the first index server continues to be used live for responding to received search requests; completing the generation of the second index during a certain period when no search request is sent to the first index server; and in response to the completing, using the second index live for responding to received search requests.

Database live reindex

Systems and methods for live reindexing include receiving, at a dispatch server, a request to reindex a database, wherein, at the time the request to reindex is received, the dispatch server is configured to send queries for information in the database to a first index server, the first index server comprising a first index of information in the database. The systems and methods further include, responsive to receiving the request to reindex and while the database is live, generating a second index of the information in the database, storing the second index at a second index server, and configuring the dispatch server to use the second index server as a live index server and to no longer use the first index server as a live index server.

Systems and techniques for searching multiple data sources are described herein. Users may specify searches of multiple data sources to occur on a periodic basis. The searches may be configured to search time or date ranges that have not previously been searched. A user may select the data sources of interest and specify search terms, review and edit previously created searches, and review results of searches. The system automatically performs the specified searches, and notifies the user and/or a team of the user each time new results are found. The system may efficiently search the data sources by storing previous search results and comparing the previous results to current search results to identify new search results.

Periodic database search manager for multiple data sources

An interactive vehicle information map system is disclosed in which, in various embodiments, geographical, geospatial, vehicle, and other types of data, geodata, objects, features, and/or metadata are efficiently presented to a user on an interactive map interface. In an embodiment, the user may search vehicle-related data via the interactive map by providing search criteria including, for example, information regarding a geographic area, a time period, a vehicle, a vehicle owner, and/or a license plate number, among other items. The map system may provide search results including a list of vehicles that match the search criteria, vehicle information, and/or points on the interactive map that indicate license-plate recognition read locations, among other information. In an embodiment, the user may view detailed information associated with particular vehicles including, for example, captured images, vehicle-owner data, event history, and the like. Further, the user may export data and/or create search alerts.

Interactive vehicle information map

Methods, systems, and apparatus, including computer programs encoded on computer storage media, for system log analysis and object-user interaction. Log data generated by network accessible systems can describe user interactions with objects maintained by the network accessible systems. A system can correlate log data to determine user access of objects. The system can generate user interfaces describing access to objects, and further determine objects being accessed with a greater frequency than other objects. The system can cause the objects to be stored by more than one network accessible system.

System log analysis and object user interaction correlation system

Embodiments of the present disclosure relate to a data analysis system that may automatically analyze a suspected malware file, or group of files. Automatic analysis of the suspected malware file(s) may include one or more automatic analysis techniques. Automatic analysis of may include production and gathering of various items of information related to the suspected malware file(s) including, for example, calculated hashes, file properties, academic analysis information, file execution information, third-party analysis information, and/or the like. The analysis information may be automatically associated with the suspected malware file(s), and a user interface may be generated in which the various analysis information items are presented to a human analyst such that the analyst may quickly and efficiently evaluate the suspected malware file(s). For example, the analyst may quickly determine one or more characteristics of the suspected malware file(s), whether or not the file(s) is malware, and/or a threat level of the file(s).

Malware data item analysis

Growing community of inventors

San Francisco, CA, United States of America

Michael Glazer