Back to results
US 2024/0171592 A1Published application
Method and System for Forensic Data Tracking
AssigneeQuickVault, Inc.
InventorsSteven V. Bacastow, Michael Royd Heuss
Life of this patent
Estimating the term…
Abstract
The present invention relates to a method and system for tracking the movement of data elements as they are shared and moved between authorized and unauthorized devices and among authorized and unauthorized users.
Claims30
A computing system comprising one or more network devices, the one or more network devices comprising one or more microprocessors and one or more memories that store executable instructions that, when executed by the one or more microprocessors, facilitate performance of operations, comprising:
- receiving meta data associated with an endpoint, the meta data comprising:
- an endpoint identifier that is indicative of the endpoint with which the meta data is associated, and
- one or more of an electronic file name, a user identifier, and one or more data tags;
- analyzing the meta data based on one or more of a configured setting and a policy;
- determining, based on the analyzing of the meta data, a pattern of data activity that constitutes a deviation from normal behavior, wherein the deviation from normal behavior is determined based on a detected data activity that deviates from an average data activity for one or more of a user, a set of users, the endpoint and a set of endpoints;
- and
- in response to determining the deviation from normal behavior, performing one or more responsive actions.
4 more elements
A method related to computing forensics, the method comprising:
- transmitting machine-executable instructions to one or more network devices comprising one or more processors and one or more memories, wherein the machine-executable instructions are stored in the one or more memories, and wherein the machine-executable instructions when executed by the one or more processors enable the one or more network devices to:
- receive meta data associated with an endpoint, the meta data comprising:
- an endpoint identifier that is indicative of the endpoint with which the meta data is associated, and
- one or more of an electronic file name, a user identifier and one or more data tags;
- analyze the meta data based on one or more of a configured setting and a policy;
- determine a pattern of data activity that constitutes a deviation from a normal pattern of data activity, wherein the deviation from the normal pattern of data activity is determined by a percentage change of data activity compared to data activity for one or more of a user, a set of users, the endpoint and a set of endpoints;
- and
- perform one or more responsive actions related to determining the pattern of data activity that constitutes the deviation from the normal pattern of data activity.
5 more elements
Dependencies are inferred from the claim text.