| CPC G06F 16/24578 (2019.01) [G06F 16/24568 (2019.01); H04L 67/535 (2022.05)] | 14 Claims | 

| 
               1. A method of updating a signature of a first process that was performed by one or more users of a computing device, the computing device having one or more software applications and separate monitoring software installed thereon, the one or more users having performed the first process by having performed a plurality of actions on the computing device, the signature being used to discover the first process in a stream of events captured by the computing device, the method comprising: 
            capturing, by the monitoring software operating in a teaching mode, click and keystroke information during performance of the plurality of actions by the one or more users when interacting with the one or more software applications to perform the first process, the click and keystroke information indicating clicks and keystrokes performed by the one or more users in the plurality of actions; 
                generating the signature of the first process by using the monitoring software to process the click and keystroke information; 
                displaying, on a graphical user interface (GUI), a visualization of the signature, wherein the visualization includes GUI elements corresponding to the plurality of actions performed by the one or more users during the teaching mode; and 
                displaying, on the GUI and in response to a first input received through the GUI indicating a first marker to associate with a first action of the plurality of actions included in the visualization, a visualization of an updated signature of the first process generated using the first marker associated with the first action based on the first input provided via the GUI. 
               |