Real-time monitoring and policy enforcement of active applications and services

A memory storage device having program instructions stored thereon that, upon execution by one or more processors of an Information Handling System (IHS), cause the IHS to:

• provide a hardware-rooted, Operating System (OS)-agnostic resource monitoring agent;
• receive, at the resource monitoring agent from a remote resource monitoring service via an out-of-band channel, a resource enforcement policy;
• determine, by the resource monitoring agent, that an application is using or attempting to use a resource in a manner that conflicts with the resource enforcement policy;
• and
• stop or prevent the application from using the resource in response to the determination.

A method, comprising:

• providing a hardware-rooted, Operating System (OS)-agnostic resource monitoring agent;
• receiving, at the resource monitoring agent from a remote resource monitoring service via an out-of-band channel, a resource enforcement policy;
• determining, by the resource monitoring agent, that an application is using or attempting to use a resource in a manner that conflicts with the resource enforcement policy;
• and
• stopping or preventing the application from using the resource in response to the determination.