US 12,761,985 B2Granted

System and method configured to perform powershell monitoring of communications to a computer-based system using keywords

AssigneeSaudi Arabian Oil Company

InventorsSharjeel Anjum, Abdulaziz I Makenzi

Life of this patent

Estimating the term…

Loading patent…

Abstract

A system and method monitor a communication directed to a computer-based system. A memory stores predetermined keywords and predetermined scores each corresponding to a predetermined keyword. A communications monitoring module monitors data string corresponding to the communications and detects a first keyword in the data string. An event code generating module generates an event code corresponding to the data string. A management module detects the generated event code. A keyword matching module searches the predetermined keywords for the detected first keyword and matches the detected first keyword with the generated event code. A score generating module generates a determined score from the detected first keyword and from the predetermined scores. A message generating module compares the determined score with a predetermined threshold and generates a message based on the comparison. The output device outputs the message corresponding to the communication. The method implements the system.

Claims15

Dependent claims

A monitoring system configured to monitor a communication directed to a computer-based system, comprising:

a hardware-based processor;
a memory configured to store instructions, to provide the instructions to the hardware-based processor, to store a plurality of predetermined keywords, and to store a plurality of predetermined scores, wherein each of the plurality of predetermined scores corresponds to a respective one of the plurality of predetermined keywords;
an operating system including:
a communications monitoring module configured, responsive to a data string corresponding to the communication, to monitor the data string, and to detect a first keyword in the data string;
and
an event code generating module configured to generate an event code corresponding to the data string;
a set of modules configured to implement the instructions provided to the hardware-based processor, the set of modules including:
a management module configured to detect the generated event code;
a keyword matching module configured to search the plurality of predetermined keywords in the memory for the detected first keyword, and to match the detected first keyword with the generated event code;
a score generating module configured to generate a determined score from the detected first keyword and from the plurality of predetermined scores;
and
a message generating module configured to compare the determined score with a predetermined threshold, and to generate a message based on the comparison;
and
an output device configured to output the message corresponding to the communication.

11 more elements

Dependencies are inferred from the claim text.