Artificial intelligence (AI) techniques for learning and modeling internal networks

A computer-implemented method comprising:

• installing a virtual machine on a computing device that resides within a network;
• communicatively coupling the virtual machine to an identity database that includes valid network identities used to facilitate a directory service for the network;
• executing an algorithm that identifies common characteristics of the valid network identities;
• creating a model of the valid network identities based on the common characteristics;
• performing a system operation using the model;
• continually monitoring whether changes have been made to any of a subset of the valid network identities;
• and
• in response to determining that a change was made to a valid network identity included in the subset, modifying the model of the valid network identities to account for the change.

A computer-implemented method comprising:

• installing a virtual machine on a computing device that resides within a network;
• communicatively coupling the virtual machine to an identity database that includes valid network identities used to facilitate a directory service for the network;
• executing an algorithm that identifies common characteristics of the valid network identities;
• creating a model of the valid network identities based on the common characteristics, wherein creating the model of the valid network identities comprises parsing the valid network identities to identify an identity syntax, and crafting an executable in accordance with the identity syntax so that the executable is indistinguishable from authentic executables maintained by the computing device;
• and
• performing a system operation using the model.