Network environment control scanning engine

A system comprising:

• an enterprise computing system comprising a communication interface communicatively connected to an external communication network, wherein a plurality of electronic messages are received via the communication interface;
• a computing platform comprising:
• a processor;
• and
• non-transitory computer readable medium storing computer-executable instructions that, when executed by the processor, cause the computing platform to:
• gather, by a machine learning based code analysis module, computing information associated with the enterprise computing network, wherein the computing information is unique to the enterprise computing network;
• identify, from a plurality of electronic messages received by an enterprise computing platform, an incoming message comprising executable code targeting a known vulnerability of an operating system of a computing device identified as a recipient of the message;
• analyze, using a machine-learning based algorithm in a virtual security environment, the executable code to identify whether the executable code comprises one or more environment variables matching a format unique to an enterprise computing environment comprising an enterprise computing network, wherein formatting environment variables and formatting rules unique to the enterprise computing environment are unknown outside the enterprise computing environment;
• match, using the machine-learning based algorithm, the one or more environment variables to computing information customized and unique to the enterprise computing network;
• identify, based on inclusion of customized environment variables that are unique to the enterprise computing network, an attempt to bypass external controls by using environment variables unknown outside the enterprise computing environment;
• and
• send, based on identification of one or more environment variables that match the format unique to the enterprise computing network within the executable code, an electronic messaging system-based alert sent identifying an intrusion attempt using suspect use of the one or more environment variables to bypassing security measures of the enterprise computing network.

A computing device securing access to an enterprise computing network, comprising:

• a processor;
• non-transitory computer-readable media storing computer-executable instructions that, when executed by the processor, cause the computing device to:
• gather, by a machine learning based code analysis module, computing information associated with the enterprise computing network, wherein the computing information is unique to the enterprise computing network;
• identify, from a plurality of electronic messages received by an enterprise computing platform, an incoming message comprising executable code targeting a known vulnerability of an operating system of the computing device identified as a recipient of the message;
• analyze, using a machine-learning based algorithm in a virtual security environment, the executable code to identify whether the executable code comprises one or more environment variables matching a format unique to an enterprise computing environment comprising an enterprise computing network, wherein formatting environment variables and formatting rules unique to the enterprise computing environment are unknown outside the enterprise computing environment;
• match, using the machine-learning based algorithm, the one or more environment variables to computing information customized and unique to the enterprise computing network;
• identify, based on inclusion of customized environment variables that are unique to the enterprise computing network, an attempt to bypass external controls by using environment variables unknown outside the enterprise computing environment;
• and
• send, based on identification of one or more environment variables that match the format unique to the enterprise computing network within the executable code, an electronic messaging system-based alert sent identifying an intrusion attempt using suspect use of the one or more environment variables to bypassing security measures of the enterprise computing network.