Abstract Systems, methods, and computer-readable media for gathering network intrusion
counter-intelligence. A system can maintain a decoy network environment at one or more …

An example method according to some embodiments includes receiving flow data for a
packet traversing a network. The method continues by determining a source endpoint group …

The disclosed technology relates to a network agent for reporting to a network policy system.
A network agent includes an agent enforcer and an agent controller. The agent enforcer is …

An application and network analytics platform can capture comprehensive telemetry from
servers and network devices operating within a network. The platform can discover flows …

An approach for establishing a priority ranking for endpoints in a network. This can be useful
when triaging endpoints after an endpoint becomes compromised. Ensuring that the most …

An example method includes a sensor detecting multiple packets of a flow during a specified
total time period (eg, a reporting time period). The total time period can be subdivided into …

This disclosure provides solutions for automatically grouping network devices (eg,
endpoints) into clusters based on device characteristics. In some aspects, the disclosed …

An example method includes detecting, using sensors, packets throughout a datacenter.
The sensors can then send packet logs to various collectors which can then identify and …

Primary Examiner Jay P Patel (74) Attorney, Agent, or Firm-Polsinelli (57) ABSTRACT
According to one or more embodiments of this disclosure, a network controller in a data …

Abstract Systems, methods, and computer-readable media for hierarchichal sharding of
flows from sensors to collectors. A first collector can receive a first portion of a network flow …