Exabeam, Inc.

Dropbox, Inc.

Sing Yip

Domingo Mihovilovic

Sylvain Gil

Fuad Rashid

James David Wong

Michael Phillip Morford

Magnus Stensmo

Eric Wayne Wagner

Nir Polak

Doron Keller

A system, method, and computer program for enabling a user to edit and access local and remote objects via a virtual drive, including objects synchronized to a plurality of synchronization clients. A virtual drive is displayed on the user's local client device with all objects, which a user has synchronized to a synchronization server. A user is able to access and edit any object displayed in the virtual drive. In response to detecting a change in an object in the virtual drive, the object is updated on the synchronization server. All remote clients of the user or of any other users who have access to the changed folder are identified and notified of the change. In response to the change being a change to content within the folder, the content of the folder is automatically updated on any identified remote clients that have a corresponding folder.

System, method, and computer program for enabling a user to access and edit via a virtual drive objects synchronized to a plurality of synchronization clients

A system, method, and computer program for enabling a user to edit and access local and remote objects via a virtual drive, including objects synchronized to a plurality of Synchronization clients. A virtual drive is displayed on the user's local client device with all objects, which a user has synchronized to a synchronization server. A user is able to access and edit any object displayed in the virtual drive. In response to detecting a change in an object in the virtual drive, the object is updated on the synchronization server. All remote clients of the user or of any other users who have access to the changed folder are identified and notified of the change. In response to the change being a change to content within the folder, the content of the folder is automatically updated on any identified remote clients that have a corresponding folder.

The present disclosure is directed to a system, method, and computer program for detecting and assessing security risks in an enterprise's computer network. A behavior model is built for a user in the network based on the user's interactions with the network, wherein a behavior model for a user indicates client device(s), server(s), and resources used by the user. The user's behavior during a period of time is compared to the user's behavior model. A risk assessment is calculated for the period of time based at least in part on the comparison between the user's behavior and the user's behavior model, wherein any one of certain anomalies between the user's behavior and the user's behavior model increase the risk assessment.

System, method, and computer program product for detecting and assessing security risks in a network

A system, method, and computer program are provided for enabling a user to edit and access local and remote objects via a virtual drive, including objects synchronized to a plurality of synchronization clients. A virtual drive is displayed on the user's local client device with all objects, which a user has synchronized to a synchronization server. A user is able to access and edit any object displayed in the virtual drive. In response to detecting a change in an object in the virtual drive, the object is updated on the synchronization server. All remote clients of the user or of any other users whom have access to the changed folder are identified and notified of the change. In response to the change being a change to content within the folder, the content of the folder is automatically updated on any identified remote clients that have a corresponding folder.

The present disclosure is directed to a system, method, and computer program for tracking user activity during a logon session, including tracking device access and any user account switches during the logon session. In response to receiving an event log for an IT event in the network, the system determines whether to filter the event, associate the event with an existing user logon session, or associate the event with a new user logon session. The system executes one or more rules to determine whether an event represents a user account switch or the continued use of an account by a user currently logged onto the network. If so, the event is associated with an existing logon session. If not, the system determines whether the event satisfies criteria for a new user logon session.

Growing community of inventors

San Francisco, CA, United States of America

Sing Yip