Carbon Black, Inc.

Advisor360 LLC

Ranganathan Gopalan

Jeffrey Albin Kraemer

Andrew Mortensen

Gerald Malan

Sanket Choksey

Paul Morville

Lawrence Huston

Jonathan Walters

Jonathan Philip Obley

Tyler Markley

A media presentation system ingests and stores media data for recordings (e.g., of events such as meetings, presentations, conferences) and provides short sections of media known as clips, that reference ranges of the full recording, with all clips referencing the same underlying media data stored by the system. The system also enables embedding of any number of arbitrarily sized (e.g., by time and dimensions) clips in a web page or document.

System and method for documenting recorded events

A system and method for tracking data security threats within an organization is proposed. A threat aggregator process executing on an analysis computer system within the organization receives events indicating possible threats observed by and sent from different user devices and aggregates related events into threats. This enables the threats to be analyzed and acted upon at a level of the organization (e.g., across user devices) rather than at the level of the individual user devices. An endpoint telemetry system analyzes threats sent from the aggregator and provides security policies for responding to the threats. In examples, the system can identify attacks of related threats and act upon the related threats of the attack collectively, and can characterize false positive threats sent from multiple user devices as a single extraneous threat. This has advantages over the per-user device focus for responding to threats provided by current systems and methods.

Multi-host threat tracking

A distributed security system and method are disclosed that enable access to known threat events from threat intelligence feeds when the system includes public cloud components. A cloud-based security policy system stores observable events for security incidents detected by and sent from user devices within an enterprise network. The observable events include observable indicators for characterizing the observable events. The threat events within the feeds include threat indicators for characterizing the threat events. An on-premises connector within the enterprise network downloads the observable indicators from the security policy system and the threat indicators from the feeds. In response to determining that any observable indicators match any threat indicators, the on-premises connector provides access to the threat events and/or the observable events having the matching indicators. In one example, the on-premises connector generates opaque query strings for users on user devices to access the threat events/observable events having the matching indicators.

Using private threat intelligence in public cloud

Growing community of inventors

Wayland, MA, United States of America

Ranganathan Gopalan