Systems and methods for computer environment situational awareness

A method of monitoring states of operation of assets in a network of computer devices, the method comprising:

• identifying, by a controller engine, a target asset of the computer network;
• establishing, by an asset profiling engine, a communication link with a computing device associated with the target asset;
• determining, by the asset profiling engine, a first set of parameters for profiling the target asset;
• transmitting, by the asset profiling engine, via the communication link, a first query for the first set of parameters to the computing device;
• receiving, by the asset profiling engine, via the communication link, one or more first parameter values corresponding to the first set of parameters responsive to the query;
• comparing, by the asset profiling engine, the one or more first parameter values to one or more first criteria or threshold values;
• and
• determining, by the asset profiling engine, a state of operation of the target asset based on comparing the one or more first parameter values to the one or more first criteria or threshold values, the state of operation indicative of an abnormal behavior associated with the target asset.

A non-transitory computer-readable medium with computer code instructions stored thereon, the computer code instructions when executed by one or more processors cause the one or more processors to:

• identify a target asset of the computer network;
• establish a communication link with a computing device associated with the target asset;
• determine a first set of parameters for profiling the target asset;
• transmit via the communication link, a first query for the first set of parameters to the computing device;
• receive, via the communication link, one or more first parameter values corresponding to the first set of parameters responsive to the query;
• compare the one or more first parameter values to one or more first criteria or threshold values;
• and
• determine a state of operation of the target asset based on comparing the one or more first parameter values to the one or more first criteria or threshold values, the state of operation indicative of an abnormal behavior associated with the target asset.