Microsoft Technology Licensing, LLC

Cristian C Berejan

Jason Joseph Weber

Charles Strempler

Abhishek Sagar

Mara Beth Fortini

Fredric W Pullen, Iii

Sinclaire Renee Hamilton

Richard Joseph Murillo

Christian Stockwell

Michael David Mccormack

Brian Keith Catlin

Nerses Ghevondyan

Devanshi M Gajjar

Millen May T Angeles

Shreya Salikram Chowdhary

Paresh Maisuria

Svetoslav G Paregov

Embodiments of the technology described herein identify and mitigate phishing attempts by analyzing user input received at the operating system level. Initially, a credential, such as a username or password, is registered with the threat detection system. The technology described herein intercepts user input at the operating system level, generates a hash of the input, and compares it with a hash of a credential being monitored. The technology described herein will perform a threat assessment when a secret entry is detected. The threat assessment may use the application context and the network context as inputs to the assessment. When the threat assessment results in an unknown classification or when the snapshot is otherwise requested, a snapshot is captured to supplement the threat assessment. Based on user settings, the snapshot is consumed by a snapshot phishing machine learning model. Various mitigation actions may be taken when a threat is detected.

Snapshot phishing detection and threat analysis

Growing community of inventors

Redmond, WA, United States of America

Cristian C Berejan