Primary Examiner Don G Zhao (74) Attorney, Agent, or Firm-Fish & Richardson PC (57)
ABSTRACT Implementations of the present disclosure include providing a state graph …

Implementations of the present disclosure include providing a graph that is representative of
an enterprise network and includes nodes and edges, a set of nodes representing assets …

Log data associated with at least one user session associated with an original user is
received. A logical graph is generated using at least a portion of the received log data. One …

Implementations of the present disclosure include receiving, from an agile security platform,
attack graph (AG) data representative of one or more AGs, each AG representing one or …

Implementations of the present disclosure include providing graph data defining a graph that
is representative of an enterprise network, the graph including nodes and edges between …

Network activity data is received, for example, from a set of agents reporting collectively
information about a set of hosts. The received network activity data is used to identify a user …

Implementations of the present disclosure include providing, by a security platform, graph
data defining a graph that is representative of an enterprise network, the graph including …

Activities within a network environment are monitored (eg, using agents). At least a portion of
the monitored activities are used to generate a logical graph model. The generated logical …

Implementations of the present disclosure include providing a graph representative of a
network, a set of nodes repre senting respective assets, each edge representing one or …

Identification of malicious network domains through use of links analysis of graph
representation of network activity, such as a bipartite graphs. An example method includes …