Patent Document ID: 7908371
Application ID: 12717693

Base Claim:
1. A method for classifying activity performed on a computer system, comprising: monitoring the activity performed on the computer system using at least one electronic device coupled to the computer system, wherein the monitored activity includes a plurality of actions performed on the computer system and a plurality of objects accessed in the plurality of actions performed on the computer system; determining, by the at least one electronic device, a chronological timeline for the plurality of actions performed on the computer system; inferring, by the at least one electronic device, one or more relationships between the plurality of objects and the plurality of actions in the chronological timeline; classifying, by the at least one electronic device, each of the plurality of objects and each of the plurality of actions in one or more of a plurality of categories based on the one or more inferred relationships; and displaying the one or more inferred relationships on a display device.

---

Claim 2:
2. The method of claim 1 , further comprising defining the plurality of categories in response to the electronic device receiving an input that establishes the plurality of categories.