The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jun. 23, 2026

Filed:

May. 29, 2024
Applicant:

Palo Alto Networks (Israel Analytics) Ltd., Tel Aviv, IL;

Inventors:

Or Chechik, Rishon LeZion, IL;

Ori Damari, Ramat Gan, IL;

Yaron Samuel, Ramat Gan, IL;

Assignee:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/56 (2013.01); G06F 21/51 (2013.01);
U.S. Cl.
CPC ...
G06F 21/51 (2013.01); G06F 21/56 (2013.01);
Abstract

Methods, storage systems and computer program products implement embodiments of the present invention that include deploying, in a memory used by an operating system kernel of a computer, a hooked version of a syscall that is configured to modify an execution status of processes executing on the computer. Subsequent to one or more protected processes being specified, a notification of a call to the syscall from the hooked version of the syscall is received, the call requesting to change the execution status of a given process executing on the computer. Finally, upon ascertaining that the given process is one of the protected processes, execution of the syscall is inhibited.


Find Patent Forward Citations

Loading…