Patent ID: 8095979

Claim:
A method of assessing the existence of a condition that has an impact on performance or security of a computing arrangement, the method comprising: receiving, at a first device, event information from a plurality of sources, said plurality of sources comprising a first source and a second source, said first and second sources requiring sign-on by an entity in order to be used, said event information comprising a plurality of events, each of said plurality of events having an identifier tied to the respective sign-on, said identifier being created at time of a sign-on into said computing arrangement, said identifier being identical for said plurality of events performed by said entity across various sources in said computing arrangement, said event information including information generated by said first source and by said second source; analyzing said event information at said first device; determining that said condition exists based on said analyzing, said determining being based at least in part on a finding that said plurality of events originating from said first and second source pertain to the same entity, said finding being made based on said identifier being the same in each of said two events; and performing at least one action to remediate said condition.