Macro-Script Execution Control
AssigneeCylance Inc.
InventorDerek A. Soeder
Life of this patent
Estimating the term…
Abstract
An agent inserts one or more hooks into a sub-execution runtime environment that is configured to include a script and/or targeted to include the script. The agent including the one or more hooks monitors a behavior of the sub-execution runtime environment and/or the script. The agent subsequently obtains context information regarding the sub-execution runtime environment and/or the script so that it can control the runtime of at least the sub-execution runtime environment. Related systems, methods, and articles of manufacture are also disclosed.
Claims20
A computer-implemented method comprising:
- inserting, by an agent, two or more hooks of different types into a sub-execution runtime environment, the sub-execution runtime environment configured to include a script and/or targeted to include the script;
- monitoring, by the agent including the two or more hooks, a behavior of the sub-execution runtime environment and/or the script;
- obtaining, by the agent including the two or more hooks, context information regarding the sub-execution runtime environment and/or the script;
- and
- controlling, by the agent, the runtime of at least the sub-execution runtime environment, the controlling based on the monitored behavior and the obtained context information.
A computer-implemented method comprising:
- inserting, by an agent, two or more hooks of different types into a sub-execution runtime environment, the sub-execution runtime environment configured to include a script;
- monitoring, by a first of the two or more hooks, a behavior of the sub-execution runtime environment;
- obtaining, by a second of the two or more hooks, context information regarding the sub-execution runtime environment;
- and
- controlling, by the agent, the runtime of at least the sub-execution runtime environment, the controlling based on the monitored behavior and the obtained context information.
A computer-implemented method comprising:
- inserting, by an agent, two or more hooks of different types into a sub-execution runtime environment, the sub-execution runtime environment configured to include a script and/or targeted to include the script;
- monitoring, by a first of the two or more hooks, a behavior of the script;
- obtaining, by a second of the two or more hooks, context information regarding the script;
- and
- controlling, by the agent, the runtime of at least the sub-execution runtime environment including the script, the controlling based on the monitored behavior and the obtained context information.
Dependencies are inferred from the claim text.