Back to results
US 2019/0104147 A1Published application
Intrusion investigation
AssigneeMicrosoft Technology Licensing, LLC
InventorsMohamed Rouatbi, Julian Federico Gonzalez, JR., Marcus Peinado, Mariusz H. Jakubowski, Svetlana Gaivoronski
Life of this patent
Estimating the term…
Abstract
A process to investigate intrusions with an investigation system is disclosed. The process receives forensic facts from a set of forensic events on a system or network. A suspicious fact is identified from the forensic facts. A related fact from the forensic facts is identified based on the suspicious fact.
Claims20
A method of investigating intrusions on a system or network, the method comprising:
- receiving forensic facts from a set of forensic events on the system or network;
- identifying a suspicious fact from the forensic facts;
- and
- identifying a related fact from the forensic facts based on the suspicious fact.
1 more element
A computer readable storage device to store computer executable instructions to control a processor to:
- receive forensic facts from a set of forensic events on the system or network;
- identify a suspicious fact from the forensic facts;
- and
- identify a related fact from the forensic facts based on the suspicious fact.
1 more element
A system, comprising:
- a memory device to store a set of instructions;
- and
- a processor to execute the set of instructions to:
- receive forensic facts from a set of forensic events on the system or network;
- identify a suspicious fact from the forensic facts;
- and
- identify related facts from the forensic facts based on the suspicious fact.
4 more elements
Dependencies are inferred from the claim text.