Automatic computer data deduplication process for application whitelisting system

A system, comprising:

• a computer processor;
• and
• memory storing instructions, when executed, causing the computer processor to:
• detect, in an application whitelisting database of a computer system, that a first agent entry and a second agent entry have a same machine name within the computer system;
• record, in a duplicates repository separate from the application whitelisting database, the first agent entry and the second agent entry;
• detect, in the duplicates repository separate from the application whitelisting database, that the first agent entry has a connected status;
• record, in a connected duplicates repository separate from the application whitelisting database, the first agent entry based on the connected status;
• determine, by at least comparing the duplicates repository and the connected duplicates repository, that the second agent entry is a disconnected duplicate of the first agent entry;
• delete, in response to said determining, the second agent entry from the application whitelisting database;
• and
• increases operation efficiency of the system by dynamically reducing, based at least on the computer processor deleting the second agent entry, a space of the application whitelisting database,
• wherein a number of times that a human analyst needs to investigate the application whitelisting database is reduced based at least on the computer processor deleting the second agent entry.

An application whitelisting system, comprising:

• an application whitelisting database of a computer system;
• a duplicates repository separate from the application whitelisting database;
• a connected duplicates repository separate from the application whitelisting database;
• a computer processor;
• and
• memory storing instructions, when executed, causing the computer processor to:
• detect, in the application whitelisting database, that a first agent entry and a second agent entry have a same machine name within the computer system;
• record, in the duplicates repository, the first agent entry and the second agent entry;
• detect, in the duplicates repository, that the first agent entry has a connected status;
• record, in the connected duplicates repository, the first agent entry based on the connected status;
• determine, by at least comparing the duplicates repository and the connected duplicates repository, that the second agent entry is a disconnected duplicate of the first agent entry;
• delete, in response to said determining, the second agent entry from the application whitelisting database, and
• increase operation efficiency of the computer system by dynamically reducing, based at least on said deleting the second agent entry, a space of the application whitelisting database,
• wherein a number of times that a human analyst needs to investigate the application whitelisting database is reduced based at least on said deleting the second agent entry.