Detecting and Identifying Devices at Enterprise Locations to Protect Enterprise-Managed Information and Resources

A method, comprising:

• at an enterprise center monitoring system comprising at least one processor, a communication interface, and memory:
• receiving, by the at least one processor, via the communication interface, from an enterprise device identification computing platform, first device information identifying a first plurality of devices present at a first enterprise location during a time period corresponding to a first malicious event;
• based on the first device information received from the enterprise device identification computing platform, detecting, by the at least one processor, that a first device of the first plurality of devices present at the first enterprise location during the time period corresponding to the first malicious event is present at a second enterprise location associated with the enterprise center monitoring system;
• in response to detecting that the first device of the first plurality of devices present at the first enterprise location during the time period corresponding to the first malicious event is present at the second enterprise location associated with the enterprise center monitoring system, generating, by the at least one processor, one or more commands directing an augmented reality device at the second enterprise location to display an overlay highlighting a user in possession of the first device;
• and
• sending, by the at least one processor, via the communication interface, to the augmented reality device at the second enterprise location, the one or more commands directing the augmented reality device at the second enterprise location to display the overlay highlighting the user in possession of the first device, wherein sending the one or more commands directing the augmented reality device at the second enterprise location to display the overlay highlighting the user in possession of the first device to the augmented reality device at the second enterprise location causes the augmented reality device at the second enterprise location to present at least one augmented-reality user interface comprising at least one augmented-reality user interface element identifying the user in possession of the first device.

One or more non-transitory computer-readable media storing instructions that, when executed by an enterprise center monitoring system comprising at least one processor, a communication interface, and memory, cause the enterprise center monitoring system to:

• receive, via the communication interface, from an enterprise device identification computing platform, first device information identifying a first plurality of devices present at a first enterprise location during a time period corresponding to a first malicious event;
• based on the first device information received from the enterprise device identification computing platform, detect that a first device of the first plurality of devices present at the first enterprise location during the time period corresponding to the first malicious event is present at a second enterprise location associated with the enterprise center monitoring system;
• in response to detecting that the first device of the first plurality of devices present at the first enterprise location during the time period corresponding to the first malicious event is present at the second enterprise location associated with the enterprise center monitoring system, generate one or more commands directing an augmented reality device at the second enterprise location to display an overlay highlighting a user in possession of the first device;
• and
• send, via the communication interface, to the augmented reality device at the second enterprise location, the one or more commands directing the augmented reality device at the second enterprise location to display the overlay highlighting the user in possession of the first device, wherein sending the one or more commands directing the augmented reality device at the second enterprise location to display the overlay highlighting the user in possession of the first device to the augmented reality device at the second enterprise location causes the augmented reality device at the second enterprise location to present at least one augmented-reality user interface comprising at least one augmented-reality user interface element identifying the user in possession of the first device.