Entity matching across telemetries

A server device comprising:

• one or more processors;
• and
• one or more non-transitory computer-readable media storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to:
• receive telemetry data of a computing network, the telemetry data including:
• identifying information corresponding to a first entity,
• associated information of the computing network, and multiple timestamps;
• establish two or more time windows based at least in part on the multiple timestamps;
• maintain an address book comprising the two or more time windows, the address book including a first mapping of the associated information of the first entity to a particular time window;
• receive additional telemetry data of the computing network, the additional telemetry data corresponding to a second telemetry source, the additional telemetry data comprising additional associated information of an unknown second entity of the computing network;
• determine a second mapping of the additional associated information of the unknown second entity to the particular time window;
• and
• based at least in part on the first mapping and the second mapping, match the first entity to the unknown second entity.

A method comprising:

• receiving, via a first type of telemetry, first input corresponding to an unknown first entity of a computing network;
• maintaining an address book based at least in part on the first input, wherein the address book comprises a plurality of time windows and the first input is associated with at least one of the time windows in the address book;
• receiving, via a second type of telemetry, second input corresponding to a second entity of the computing network;
• and
• determining, based at least in part on the time windows of the address book, that the unknown first entity is the second entity.