Remote remediation of malicious files
AssigneeJuniper Networks, Inc.
InventorsKyle ADAMS, Daniel J. QUINLAN, Jacob Asher LANGTON
Life of this patent
Estimating the term…
Abstract
A device may determine that a file of a client device is a malicious file. The device may obtain remote access to the client device using a connection tool. The connection tool may provide access and control of the client device. The remote access may include access to a file location of the malicious file. The device may determine file information associated with the malicious file using the remote access to the client device. The device may select one or more remediation actions based on the file information. The device may cause the one or more remediation actions to be executed using the remote access to the client device.
Claims20
A device, comprising:
- one or more processors to:
- determine that a file of a client device is a malicious file;
- obtain remote access to the client device using a connection tool, the connection tool providing access and control of the client device, the remote access including access to a file location of the malicious file;
- determine file information associated with the malicious file using the remote access to the client device;
- select one or more remediation actions based on the file information;
- and
- cause the one or more remediation actions to be executed using the remote access to the client device.
A computer-readable medium storing instructions, the instructions comprising:
- one or more instructions that, when executed by one or more processors, cause the one or more processors to:
- determine that a file of a client device is a malicious file,
- the file having been at least partially analyzed to determine whether the file is a malicious file while the file is downloading to the client device;
- obtain access to the client device using an operating system interface for an operating system of the client device;
- determine, using the access to the client device, file information associated with the malicious file;
- select one or more remediation actions, from a set of remediation actions, based on the file information;
- and
- cause the one or more remediation actions to be performed on the client device using the access to the client device.
A method, comprising:
- determining, by a device, that a file of a client device is a malicious file;
- determining, by the device, that the malicious file is manageable using remote access to the client device via an operating system interface for an operating system of the client device;
- obtaining, by the device, the remote access to the client device using the operating system interface;
- determining, by the device, file information associated with the malicious file using the remote access to the client device via the operating system interface;
- selecting, by the device, one or more remediation actions based on the file information;
- and
- causing, by the device, the one or more remediation actions to be executed using the remote access to the client device via the operating system interface.
Dependencies are inferred from the claim text.