Disclosed is an improved approach to implement virtualiza tion objects in a virtualization
system. The virtualization object from a first namespace is cloned as a snapshot that is …

Recording a replay-able trace of execution of an executable entity using cache data
includes executing one or more threads of the executable entity concurrently across one or …

Recording a replay-able trace of execution of a multi-threaded process includes identifying a
trace memory model that defines one or more orderable events that are to be ordered across …

In an embodiment, a system is configured to replay and/or reconstruct execution events and
system states in real time or substantially in real time starting from the point when execution …

In an embodiment, a system is configured to replay and/or reconstruct execution events and
system states in real time or substantially in real time starting from the point when execution …

(57) ABSTRACT A log entry is received at a streaming component of an enterprise threat
detection (ETD) system from a real-time push application programming interface (API) …

Search results are received from an initiated free text search of log data from one or more
logs, where the free text is performed using search terms entered into a free text search …

An enterprise threat detection (ETD) forensic workspace is established according to a
particular timeframe and permitting defining a selection of data types from available log data …

A core includes a memory buffer and executes an instruction within a virtual machine. A
processor tracer captures trace data and formats the trace data as trace data packets. An …

Performing a cache-based trace recording using cache coherence protocol (CCP) data.
Embodiments detect that an operation that causes an interaction between a cache line and …