Game engine-based computer security

A system comprising:

• at least one processor;
• and
• a memory storing instructions executable by the at least one processor to:
• receive, at a game engine sensor, first data from an operating system that represents occurrence of a monitored event;
• send, from the game engine sensor, second data corresponding to the monitored event to a game engine logic controller, wherein the second data includes tag data associated with the monitored event;
• determine, at a first logic block of the game engine logic controller based on the second data and third data representing a system state associated with a computing device, that a first predicate condition is satisfied;
• determine, at a second logic block of the game engine logic controller based on the second data and the third data, that a second predicate condition is satisfied based at least in part on a determination that the tag data includes a first tag added to the tag data by the first logic block;
• detect a computer security threat based on the first and second predicate conditions being satisfied;
• and
• based on the detection of the computer security threat, instruct at least one game engine actuator to perform at least one action responsive to the computer security threat.

A computer-readable storage device storing instructions that, when executed, cause at least one processor to perform operations comprising:

• receiving, at a game engine sensor, first data from an operating system that represents occurrence of a monitored event;
• sending, from the game engine sensor, second data corresponding to the monitored event to a game engine logic controller, wherein the second data includes tag data associated with the monitored event;
• determining, at a first logic block of the game engine logic controller based on the second data and third data representing a system state associated with a computing device, that a first predicate condition is satisfied;
• determining, at a second logic block of the game engine logic controller based on the second data and the third data, that a second predicate condition is satisfied based at least in part on a determination that the tag data includes a first tag added to the tag data by the first logic block;
• detecting a computer security threat based on the first and second predicate conditions being satisfied;
• and
• based on the detection of the computer security threat, instructing at least one game engine actuator to perform at least one action responsive to the computer security threat.

A method of game engine-based computer security, the method comprising:

• receiving, at a game engine sensor of a first managed computing device executing an operating system, first data from the operating system that represents occurrence of a first monitored event occurring at the first managed computing device;
• sending, from the game engine sensor, second data corresponding to the first monitored event to a game engine logic controller executed by a mobile device management (MDM) server remote from the first managed computing device;
• determining, at a first logic block of the game engine logic controller based on the second data and third data representing a system state associated with the first managed computing device, that a first predicate condition is satisfied;
• determining, at a second logic block of the game engine logic controller based on the second data and the third data, that a second predicate condition is satisfied;
• detecting a computer security threat based on the first and second predicate conditions being satisfied, and based on a second monitored event occurring at a second managed computing device;
• and
• based on detecting the computer security threat, instructing at least one game engine actuator to perform at least one action responsive to the computer security threat.