The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Jun. 13, 2017
Filed:
Sep. 04, 2015
Exabeam, Inc., San Mateo, CA (US);
Sylvain Gil, San Francisco, CA (US);
Doron Keller, Palo Alto, CA (US);
Domingo Mihovilovic, Menlo Park, CA (US);
Sing Yip, San Francisco, CA (US);
Exabeam, Inc., San Mateo, CA (US);
Abstract
The present disclosure is directed to a system, method, and computer program for tracking user activity during a logon session, including tracking device access and any user account switches during the logon session. In response to receiving an event log for an IT event in the network, the system determines whether to filter the event, associate the event with an existing user logon session, or associate the event with a new user logon session. The system executes one or more rules to determine whether an event represents a user account switch or the continued use of an account by a user currently logged onto the network. If so, the event is associated with an existing logon session. If not, the system determines whether the event satisfies criteria for a new user logon session.