Crowdstrike, Inc.

Christopher White

Milos Petrbok

Martin Kelly

Marco Vedovati

Igor Polevoy

A method includes retrieving, in a kernel space of an operating system executing on a computing device, a first value from a first clock source, retrieving, in a user space of the operating system executing on the computing device, a second value from a second clock source, generating a unique process identifier (UPID) associated with a process identifier (PID) of a process executing in the operating system, wherein the UPID is based on the first value of the first clock source and the second value of the second clock source, and tracking process activity of the process executing in the operating system by utilizing the UPID.

Growing community of inventors

Avon, NY, United States of America

Christopher White