Security agent
AssigneeCrowdStrike, Inc.
InventorsDavid F. Diehl, Dmitri Alperovitch, Ion-Alexandru Ionescu, George Robert Kurtz
Life of this patent
Estimating the term…
Loading patent…
AssigneeCrowdStrike, Inc.
InventorsDavid F. Diehl, Dmitri Alperovitch, Ion-Alexandru Ionescu, George Robert Kurtz
Estimating the term…
A security agent is described herein. The security agent is configured to observe events, filter the observed events using configurable filters, route the filtered events to one or more event consumers, and utilize the one or more event consumers to take action based at least on one of the filtered events. In some implementations, the security agent detects a first action associated with malicious code, gathers data about the malicious code, and in response to detecting subsequent action(s) of the malicious code, performs a preventative action. The security agent may also deceive an adversary associated with malicious code. Further, the security agent may utilize a model representing chains of execution activities and may take action based on those chains of execution activities.
A computing system, comprising:
A computer-implemented method, comprising:
One or more non-transitory computer-readable media storing computer-executable instructions associated with a kernel-level security agent that, when executed by one or more processors of a computing system, cause the one or more processors to perform operations comprising:
Dependencies are inferred from the claim text.