Application monitoring prioritization

At least one non-transitory computer-readable medium having computer readable instructions that, when executed by at least one processor, cause the at least one processor to:

• determine a first ranking of a first endpoint, the first ranking based in part on a first reputation score based on a behavior of the first endpoint;
• determine a second ranking of a second endpoint, the second ranking based in part on a second reputation score based on a behavior of the second endpoint;
• compare the first ranking and the second ranking by selectively prioritizing the first reputation score and the second reputation score based on a policy governing the first endpoint and the second endpoint, wherein the policy determines one or more dependencies for how the first endpoint and the second endpoint interact with each other within a network based on one or more conditional events;
• in response to the second ranking being greater than the first ranking based on lowering the second reputation score based on the behavior of the second endpoint violating the policy, triage the second endpoint;
• and
• in response to the first reputation score and the second reputation score being equal, executing a tie-breaker process including:
• determine, based on the first ranking of the first endpoint and the second ranking of the second endpoint, that one of the first endpoint and the second endpoint is a higher priority endpoint;
• and
• triage the higher priority endpoint to mitigate endpoint damage.

A system comprising:

• at least one processor;
• at least one memory including instructions that when executed by the at least one processor, cause the system to:
• determine a first ranking of a first endpoint, the first ranking based in part on a first reputation score based on a behavior of the first endpoint;
• determine a second ranking of a second endpoint, the second ranking based in part on a second reputation score based on a behavior of the second endpoint;
• compare the first ranking and the second ranking by selectively prioritizing the first reputation score and the second reputation score based on a policy governing the first endpoint and the second endpoint, wherein the policy determines one or more dependencies for how the first endpoint and the second endpoint interact with each other within a network based on one or more conditional events;
• in response to the second ranking being greater than the first ranking based on lowering the second reputation score based on the behavior of the second endpoint violating the policy, triage the second endpoint;
• and
• in response to the first reputation score and the second reputation score being equal, executing a tie-breaker process including:
• determine, based on the first ranking of the first endpoint and the second ranking of the second endpoint, that one of the first endpoint and the second endpoint is a higher priority endpoint;
• and
• triage the higher priority endpoint to mitigate endpoint damage.