Secure data collection from an air-gapped network

    公开(公告)号:US11954211B2

    公开(公告)日:2024-04-09

    申请号:US17230767

    申请日:2021-04-14

    Abstract: A computer program component configured to collect configuration item data from information technology resources of an air-gapped network for an information technology configuration management database is provided. Configuration item data collected from the information technology resources of the air-gapped network is obtained using the provided computer program component, wherein the obtained configuration item data is physically transferred between a device within the air-gapped network and a device outside the air-gapped network at least in part via a portable physical storage medium, and the collected configuration item data has been reviewed and filtered within the air-gapped network prior to being physically transferred via the portable physical storage medium. The obtained configuration item data is imported to the information technology configuration management database outside the air-gapped network. Information technology management services are provided for the air-gapped network using the imported configuration item data stored outside the air-gapped network.

    DISCOVERY PROCESS IDENTIFICATION AND CLASSIFICATION

    公开(公告)号:US20220021588A1

    公开(公告)日:2022-01-20

    申请号:US16928802

    申请日:2020-07-14

    Abstract: Embodiments presented herein provide apparatus and techniques for identifying and classifying processes and associated applications executing in a network. All processes executing in a network may be identified using a discovery process. The processes may be clustered based on associations between the processes. Suggested application entries may then be generated based at least in part on the clusters of processes. A configuration item type and a discovery pattern may be generated for each suggested application entry. A subsequent discovery process may use the configuration item type and discovery patterns to identify associated configuration items in the network.

    IDENTIFICATION AND DISPLAY OF CONFIGURATION ITEM INFORMATION

    公开(公告)号:US20210234771A1

    公开(公告)日:2021-07-29

    申请号:US17301742

    申请日:2021-04-13

    Abstract: Example embodiments for identifying and displaying configuration item information are presented herein. A system may involve a proxy server application disposed within a managed network that includes configuration items and a server disposed within a remote network management platform managing the managed network. The server may receive a request to view information representative of a particular configuration item from a client device. Based on the request, the server may obtain the information and transmit a representation of a graphical user interface to the client device. The representation may include a health graphic, a relationship graphic, a timeline graphic, and an activity stream, each of which represent pertinent information about the particular configuration item. The representation may also include a tabbed interface that facilitates navigation between attributes corresponding to the particular configuration item and attributes corresponding to other configuration items in the managed network.

    DISCOVERY OF CONTAINERIZED PLATFORM AND ORCHESTRATION SERVICES

    公开(公告)号:US20210200814A1

    公开(公告)日:2021-07-01

    申请号:US16730274

    申请日:2019-12-30

    Abstract: An example computing system includes a database disposed within a remote network management platform associated with a managed network that obtains service from a computing cluster that includes one or more worker nodes configured to execute containerized software applications using a containerized orchestration engine. The computing system also includes a computing device configured to identify a namespace associated with the containerized orchestration engine. The computing device is also configured to query a deployment configuration application programming interface (API) associated with a containerized application platform to obtain deployment configuration data. Further, the computing device is configured to query a build configuration API associated with the containerized application platform to obtain build configuration data. In addition, the computing device is configured to store, in the database, the deployment configuration data, the build configuration data, and one or more relationships between the deployment configuration data and the build configuration data.

    AUTOMATICALLY DETECTING MISUSE OF LICENSED SOFTWARE

    公开(公告)号:US20200074048A1

    公开(公告)日:2020-03-05

    申请号:US16117971

    申请日:2018-08-30

    Abstract: An example embodiment may be performed by a software application executable on a computing device and may involve communicating with a server to access records of sessions between the server and computing devices of a managed network. The managed network may contain the server and a database associated with licensed software executable on the server. The database may store the records, and the records may include network addresses of the computing devices. The example embodiment may also involve: using a set of license misuse criteria to identify, within the records, (i) a set of the sessions that meets the set of criteria and (ii) a network address of a target device involved in the set of sessions; based on the network address of the target device, identifying the target device; and storing in memory an indication identifying the target device as a potential source of misuse of the licensed software.

    File-based software application discovery

    公开(公告)号:US11449579B2

    公开(公告)日:2022-09-20

    申请号:US16212396

    申请日:2018-12-06

    Abstract: A system may include a computational instance disposed within a remote network management platform and associated with a managed network, where the computational instance contains a configuration management database. The system may also include a software application disposed on a server device of the managed network and configured to perform operations comprising: obtaining, from the configuration management database, a list of directories, a list of file types, and a list of file names; remotely accessing a computing device of the managed network; for each respective directory in the list of directories, obtaining, from the computing device, information respectively related to discovered files that are: (i) disposed within the respective directory on the computing device, and (ii) specified by the list of file types or specified in the list of file names; and transmitting, to the configuration management database, the information related to the discovered files.

    Load Balancing of Discovery Agents Across Proxy Servers

    公开(公告)号:US20220232066A1

    公开(公告)日:2022-07-21

    申请号:US17152539

    申请日:2021-01-19

    Abstract: A non-transitory computer readable storage medium may have stored thereon instructions that, when executed by an endpoint device, cause the endpoint device to perform operations including: (i) establishing, by the endpoint device, a first communication channel with an intermediary proxy server; (ii) receiving, from a computational instance and via the intermediary proxy server, a registration payload comprising a list of available proxy servers; (iii) ranking, at the endpoint device, the list of available proxy servers; (iv) selecting, by the endpoint device, a particular proxy server from the list of available proxy servers as ranked; (v) establishing, by the endpoint device, a second communication channel with the particular proxy server; and (vi) communicating, by the endpoint device, with the computational instance via the particular proxy server by utilizing the second communication channel.

    Automatic Discovery of Cloud-Based Infrastructure and Resources

    公开(公告)号:US20220029886A1

    公开(公告)日:2022-01-27

    申请号:US17020340

    申请日:2020-09-14

    Abstract: A discovery computing system may receive an account identifier (ID) and a set of credentials required to access a first service account. The discovery computing system may transmit a first API query to a remote computing system. The discovery computing system may receive an organization identifier (ID) of the organization from the remote computing system. The discovery computing system may further transmit a second API query to the remote computing system. The discovery computing system may be further configured to receive information about a set of projects, in the organization, from the remote computing system. The discovery computing system may further generate a set of service accounts and further determine the set of resources, in the remote computing system, associated with each of the generated set of service accounts. The discovery computing system may further store the determined set of resources, as configuration items in a persistent storage.

Patent Agency Ranking