Secureworks, Inc.

Dell Products Inc.

Matthew K Geiger

Timothy M Vidas

Ross Rowland Kinder

Aaron Hackworth

Kevin R Moore

Jon R Ramsey

Oliver J Palmer

Matt J McCormack

A system for collection and analysis of forensic and event data comprising a server and an endpoint agent operating on a remote system. The server is configured to receive event data including process creation data, persistent process data, thread injection data, network connection data, memory pattern data, or any combination thereof, and analyze the event data to detect compromises of a remote system. The endpoint agent is configured to acquire event data, and communicate the event data to the server.

System and method for detecting and monitoring network communication

System and method for detecting and monitoring process creation

System and method for collection of forensic and event data

System and method for detecting and monitoring thread creation

System and method for collection and analysis of endpoint forensic and event data

System and method for detecting and monitoring persistent events

Growing community of inventors

Austin, TX, United States of America

Matthew K Geiger