ENDPOINT AGENT CLIENT SENSORS (cSENSORS) AND ASSOCIATED INFRASTRUCTURES FOR EXTENDING NETWORK VISIBILITY IN AN ARTIFICIAL INTELLIGENCE (AI) THREAT DEFENSE ENVIRONMENT

An endpoint agent client sensor (cSensor) for extending network visibility in an endpoint computing device, comprising:

• a security module configured to have an interface to cooperate with and integrate with an operating system (OS) of the endpoint computing device;
• a network module configured to cooperate with the security module, where the network module is configured to monitor network information coming into and out of the endpoint computing device as a first set of traffic data, where the network module is configured to ingest the first set of traffic data transmitted via one or more connections between a network interface of the endpoint computing device and at least one or more network entities;
• a collation module configured to collect the ingested first set of traffic data from the network module, where the collation module is configured to obtain input data from the collected first set of traffic data, where the input data includes at least an identity of a computing process running in the endpoint computing device at least one of sending the first set of traffic data and receiving the first set of traffic data;
• an analyzer module having an intelligent deep packet inspection (DPI) engine, where the analyzer module is configured to receive the input data from the first set of traffic data being transmitted via the respective connection, wherein the intelligent DPI engine is configured to perform a first predetermined level of DPI on the input data from two or more possible levels of DPI based on one or more network parameters;
• a communication module configured to securely transmit a second set of traffic data to a cyber security appliance located in a network, where the endpoint computing device also is part of the network, wherein the transmitted second set of traffic data is associated with the first predetermined level of DPI performed on the input data from the first set of traffic data;
• an autonomous action module configured to perform one or more autonomous actions itself, rather than a human, wherein the triggered autonomous actions are correlated to at least one of i) the first set of traffic data and ii) the second set of traffic data;
• and
• where any instructions for the endpoint agent cSensor are stored on non-transitory computer readable mediums in an executable state, which are to be executed by one or more processing units.