Patent Document ID: 7908371
Application ID: 12717693

Base Claim:
1. A method for classifying activity performed on a computer system, comprising: monitoring the activity performed on the computer system using at least one electronic device coupled to the computer system, wherein the monitored activity includes a plurality of actions performed on the computer system and a plurality of objects accessed in the plurality of actions performed on the computer system; determining, by the at least one electronic device, a chronological timeline for the plurality of actions performed on the computer system; inferring, by the at least one electronic device, one or more relationships between the plurality of objects and the plurality of actions in the chronological timeline; classifying, by the at least one electronic device, each of the plurality of objects and each of the plurality of actions in one or more of a plurality of categories based on the one or more inferred relationships; and displaying the one or more inferred relationships on a display device.

---

Claim 4:
4. The method of claim 1 , further comprising searching, by the at least one electronic device, the activity performed on the computer system for one or more of the plurality of actions that are classified in one or more of the plurality of categories.