Method and System for Analyzing Data Related to an Event

• US 20130325791A1
• Filed: 08/02/2013
• Published: 12/05/2013
• Est. Priority Date: 02/01/2008
• Status: Abandoned Application

• Current Assignee: FireEye, Inc. (Alphabet Inc.)
• Original Assignee: FireEye, Inc. (Alphabet Inc.)
• Inventors: Shiffer, Jason, Frazier, Matthew, Cunningham, Sean, Hogsten, Scott, Helvey, Eric, Wilson, Theodore
• Application Number:
  US13/957,707
• Publication Number:
  US 20130325791A1
• Time in Patent Office: Days
• US Class Current: 707/602
• CPC Class Codes: G06F 16/00 Information retrieval; Database structures therefor; File system structures therefor
• CPC Class Codes: G06F 16/254 Extract, transform and load [ETL] procedures, e.g. ETL data flows in data warehouses
• CPC Class Codes: G06F 16/27 Replication, distribution or synchronisation of data between databases or within a distributed database system; Distributed database system architectures therefor

Abstract

A system and method for analyzing data from a plurality of computer environments. A user may search for computer environments that meet a certain criterion. The computer environments are authenticated and data is copied from the computer environments to a memory location. The data may be marked so that a user may determine which computer environment provided the data. The user may add notations to the data during a review. Changes to data on the computer environments may be provided to a user using a syndication feed.

Claims

1. A method of analyzing data related to an event comprising:

(a) copying a plurality of files from a plurality of storage devices to a memory location;

(b) converting the plurality of files to a predetermined unified format;

(c) analyzing the plurality of files; and

(d) providing a report to a user based on the analysis.

2. The method of claim 1 wherein analyzing the data comprises sorting the data using a variable.

3. The method of claim 1 wherein the event is a user request.

4. The method of claim 1 wherein the event is a response to an incident.

5. The method of claim 1 wherein analyzing the data comprises sorting the data into data groups based on one or more variables.

6. The method of claim 5 comprising comparing the data groups and providing a report to the user showing the union of two groups.

7. The method of claim 5 comprising comparing the data groups and providing a report to the user showing the intersection of two groups.

8. The method of claim 5 comprising comparing the data groups and providing a report to the user showing the difference between two groups.

9. The method of claim 5 comprising comparing the data groups and providing a report to the user showing the similarities between two groups.

10. The method of claim 1 wherein the report comprises a list of the plurality of files.

11-65. -65. (canceled)