System and method configured to perform powershell monitoring of communications to a computer-based system using keywords

Abstract

A system and method monitor a communication directed to a computer-based system. A memory stores predetermined keywords and predetermined scores each corresponding to a predetermined keyword. A communications monitoring module monitors data string corresponding to the communications and detects a first keyword in the data string. An event code generating module generates an event code corresponding to the data string. A management module detects the generated event code. A keyword matching module searches the predetermined keywords for the detected first keyword and matches the detected first keyword with the generated event code. A score generating module generates a determined score from the detected first keyword and from the predetermined scores. A message generating module compares the determined score with a predetermined threshold and generates a message based on the comparison. The output device outputs the message corresponding to the communication. The method implements the system.