Known Deployed File Metadata Repository and Analysis Engine

A method comprising:

• identifying, based on a signal indicating storage of a file a software distribution point (SDP) computing system, wherein the signal is automatically generated by the SDP computing system based on saving of at least one file;
• retrieving, based on a comparison of enumerated files on the SDP computing system to logical paths associated with the SDP computing system, one or more new files;
• extracting, by a known deployed file metadata analysis engine, metadata from each of the one or more new files;
• identifying, by the known deployed file metadata analysis engine, a match of metadata of the one or more new files and metadata stored in a data store comprising information stored of “known-good” files that comprises an indication of one or more of an associated internal development group and a trusted vendor providing “safe” applications;
• enriching, by the known deployed file metadata analysis engine, the matched metadata with an indication that the file is “known-deployed” and comprising artifact metadata only available during dynamic execution of a particular entry of an artifact by the known deployed file metadata analysis engine and comprising an indication of the SDP and that the file was introduced to a host through methods associated with approved software distribution practices;
• and
• triggering, by the known deployed file metadata analysis engine, synchronization of stored metadata to an external computing system based on the enrichment of the matched metadata.

A system comprising:

• a software distribution point (SDP) computing system comprising memory storing a plurality of enumerated files;
• a known-deployed file metadata analysis server comprising:
• a processor;
• and
• non-transitory memory storing instructions that, when executed by the processor, causes the known-deployed file metadata analysis server to:
• compare enumerated files to logical paths associated with the SDP computing system to identify one or more new files;
• extract metadata from each of the one or more new files;
• identify a match of metadata of a file of the one or more new files and metadata stored in a data store comprising information stored of “known-good” files;
• enrich the matched metadata with an indication that the file is “known-deployed”, wherein the indication comprises artifact metadata only available during dynamic execution of a particular entry of an artifact by a known deployed file metadata analysis engine and comprising an indication of the SDP and that the file was introduced to a host through methods associated with approved software distribution practices;
• and
• trigger synchronization of stored metadata to an external computing system based on the enrichment of the matched metadata.