Updating a state of a client device based on an event that includes a subset of records that identify binaries associated with the client device

A method comprising:

• storing an initial state of a client device,
• the initial state defined by a first plurality of records that identify a first plurality of respective binaries that are associated with the client device at a first time instance;
• receiving a first event of a plurality of events from the client device,
• each event of the plurality of events, except for a last event of the plurality of events, including a respective subset of a second plurality of records and a beginning record of a next sequential event of the plurality of events,
• the last event of the plurality of events including a respective subset of the second plurality of records,
• the second plurality of records identifying a second plurality of respective binaries that are associated with the client device at a second time instance that temporally follows the first time instance;
• identifying a first subset of the second plurality of records that is included in the first event by parsing the first event;
• and
• generating an updated state of the client device by replacing a first portion of the first plurality of records, which corresponds to the first subset of the second plurality of records, with the first subset of the second plurality of records in the memory.

A computer program product comprising a computer-readable storage medium having instructions recorded thereon for enabling a processor-based system to perform operations, the operations comprising:

• storing an initial state of a client device,
• the initial state defined by a first plurality of records that identify a first plurality of respective binaries that are associated with the client device at a first time instance;
• receiving a plurality of events from the client device at a plurality of respective time instances,
• the plurality of events including respective subsets of a second plurality of records,
• the second plurality of records identifying a second plurality of respective binaries that are associated with the client device at a second time instance that temporally follows the first time instance;
• and
• based at least on receipt of each of the plurality of events, performing the following:
• parsing the respective event to identify the respective subset of the second plurality of records that is included in the respective event;
• and
• triggering a respective incremental update of a state of the client device without regard to whether another event of the plurality of events has been received from the client device by replacing a respective portion of the first plurality of records, which corresponds to the respective subset of the second plurality of records, with the respective subset of the second plurality of records.