Cylance Inc.

Michael Alan Hohimer

Matthew Wolff

Eric G Petersen

Jian Luan

Brian Michael Wallace

An artifact is received and features are extracted therefrom to form a feature vector. Thereafter, a determination is made to alter a malware processing workflow based on a distance of one or more features in the feature vector relative to one or more indicator centroids. Each indicator centroid specifying a threshold distance to trigger an action. Based on such a determination, the malware processing workflow is altered.

Growing community of inventors

Portland, OR, United States of America

Michael Alan Hohimer