Monitoring Devices at Enterprise Locations Using Machine-Learning Models to Protect Enterprise-Managed Information and Resources

A method, comprising:

• at a computing platform comprising at least one processor, a communication interface, and memory:
• receiving, by the at least one processor, via the communication interface, from one or more data source computer systems, passive monitoring data;
• applying, by the at least one processor, a machine-learning classification model to the passive monitoring data received from the one or more data source computer systems;
• based on applying the machine-learning classification model to the passive monitoring data received from the one or more data source computer systems, determining, by the at least one processor, to trigger a data capture process at a first enterprise center;
• in response to determining to trigger the data capture process at the first enterprise center, initiating, by the at least one processor, an active monitoring process to capture event data at the first enterprise center;
• generating, by the at least one processor, one or more alert messages based on the event data captured at the first enterprise center;
• and
• sending, by the at least one processor, via the communication interface, to one or more enterprise computer systems, the one or more alert messages generated based on the event data captured at the first enterprise center.

One or more non-transitory computer-readable media storing instructions that, when executed by a computing platform comprising at least one processor, a communication interface, and memory, cause the computing platform to:

• receive, via the communication interface, from one or more data source computer systems, passive monitoring data;
• apply a machine-learning classification model to the passive monitoring data received from the one or more data source computer systems;
• based on applying the machine-learning classification model to the passive monitoring data received from the one or more data source computer systems, determine to trigger a data capture process at a first enterprise center;
• in response to determining to trigger the data capture process at the first enterprise center, initiate an active monitoring process to capture event data at the first enterprise center;
• generate one or more alert messages based on the event data captured at the first enterprise center;
• and
• send, via the communication interface, to one or more enterprise computer systems, the one or more alert messages generated based on the event data captured at the first enterprise center.