Back to results
US 2025/0310348 A1Published application
Method and System for Forensic Data Tracking
AssigneeQuickVault, Inc.
InventorsSteven V. Bacastow, Michael Royd Heuss
Life of this patent
Estimating the term…
Abstract
The present invention relates to a method and system for tracking the movement of data elements as they are shared and moved between authorized and unauthorized devices and among authorized and unauthorized users.
Claims22
A computing system comprising one or more network devices, the one or more network devices comprising one or more microprocessors and one or more memories that store executable instructions that, when executed by the one or more microprocessors, facilitate performance of operations, comprising:
- receiving meta data, the meta data comprising:
- an endpoint identifier that is indicative of an endpoint with which the meta data is associated, and
- one or more of an electronic file name, a user identifier, an IP address, a URL, a software identifier and a computing device identifier;
- determining, based on analyzing the meta data, a pattern of activity that constitutes a deviation from normal behavior, wherein the deviation from normal behavior is determined by detecting that a deviation of one or both of a composition and a volume of the meta data, relative to historical behavior, is associated with one or more of a user, a set of users, the endpoint, a set of endpoints, the IP address, the URL, the software identifier, and the computing device identifier.
1 more element
A method for computing forensics, the method comprising:
- transmitting machine-executable instructions to one or more network devices comprising one or more processors and one or more memories, wherein the machine-executable instructions are stored in the one or more memories, and wherein the machine-executable instructions when executed by the one or more processors enable the one or more network devices to:
- receive meta data, the meta data comprising:
- an endpoint identifier that is indicative of an endpoint with which the meta data is associated, and
- one or more of an electronic file name, a user identifier, an IP address, a URL, a software identifier and a computing device identifier;
- determine, based on analyzing the meta data, a pattern of activity that constitutes a deviation from normal behavior, wherein the deviation from normal behavior is determined by detecting that a deviation of one or both of a composition and a volume of the meta data, relative to historical behavior, is associated with one or more of a user, a set of users, the endpoint, a set of endpoints, the IP address, the URL, the software identifier, and the computing device identifier.
2 more elements
Dependencies are inferred from the claim text.