1. A computer-implemented method executed on at least one processor, the method comprising: accessing transfer recordings that describe a transfer of a data object between at least two of a plurality of services in a computing environment; identifying, in the transfer recordings, key-value pairs associating a key with a value, wherein the key corresponds to a data attribute that stores the value in the data object, and wherein the key includes: a service identifier corresponding to a service of the plurality of services, the service participating in the transfer of the data object; a method identifier corresponding to a method provided by the service, the method participating in the transfer of the data object; and a key name corresponding to the data attribute included in the data object; identifying a plurality of candidate keys corresponding to a same value in the key-value pairs; accessing correlation information that describes: a plurality of key associations between pairs of keys; and a correlation count of a number of instances of association between each of the pairs of keys; for each pair of candidate keys in the plurality of candidate keys, updating the correlation information to increment the correlation count for one of the plurality of key associations that associates the pair of candidate keys; and storing the updated correlation information.