State-based entity behavior analysis

A computer program product comprising a non-transitory computer readable medium storing instructions executable by a processor to perform a set of operations, the set of operations comprising:

• receiving an indication of an event associated with an entity in a computing environment;
• executing computer-executable code of a transition in a place/transition (PT) network, to determine, based on the event, whether the entity should transition from a first place to a second place of the PT network;
• when it is determined that the entity should transition from the first place to the second place, associating the entity with the second place of the PT network;
• determining an action to perform based on the entity being associated with the second place of the PT network;
• and
• performing the determined action.

A computer program product comprising a non-transitory computer readable medium storing instructions executable by a processor to perform a set of operations, the set of operations comprising:

• receiving an indication of a state change of a first entity;
• identifying a relationship associated with the first entity;
• determining whether the relationship should be modified based on the indication of the state change of the first entity;
• when it is determined that the relationship should be modified, modifying the relationship based on the state change of the first entity;
• identifying a second entity associated with the first entity by one or more relationships;
• determining, using a place/transition (PT) network associated with the second entity, whether the second entity should change states based on the indication of the state change of the first entity;
• when it is determined that the second entity should change states, associating the second entity with an updated state based on the PT network;
• and
• performing an action for the first entity based on the indication of the state change for the first entity.

The computer program product 14, wherein modifying the relationship comprises at least one of:

• removing the relationship;
• updating the relationship;
• and
• generating a new relationship between the first entity and another entity.

The computer program product 14, wherein the PT network comprises:

• a place associated with a good state for the second entity;
• a place associated with a bad state for the second entity;
• and
• a place associated with an unknown state for the second entity.

The computer program product 14, wherein performing the action for the first entity comprises at least one of:

• generating a recommendation for the first entity;
• performing a remedial action;
• and
• generating a recommendation to modify a relationship between the first entity and another entity within a computing environment of the first entity.