Crowdstrike, Inc.

Aaron Javon Marks

David Frederick Diehl

Daniel W Brown

Kirby James Koster

Daniel T Martin

A security agent implemented on a monitored computing device is described herein. The security agent has access to parametric behavioral pattern definitions that, in combination with canonical patterns of behavior, configure the security agent to match observed behavior with known computing behavior that is benign or malignant. This arrangement of the definitions and the pattern of behavior allow the security agent's behavior to be updated by a remote security service without updating a configuration of the security agent. The remote security service can create, modify, and disseminate these definitions and patterns of behavior, giving the security agent real-time ability to respond to new behaviors exhibited by the monitored computing device.

Growing community of inventors

Warminster, PA, United States of America

Aaron Javon Marks