The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Oct. 13, 2026

Filed:

Dec. 20, 2022
Applicant:

Crowdstrike, Inc., Sunnyvale, CA (US);

Inventors:

Martin Kelly, Bothell, WA (US);

Jayasankar Divakarla, Bangalore, IN;

Assignee:

CrowdStrike, Inc., Sunnyvale, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/51 (2013.01); G06F 21/52 (2013.01); G06F 21/56 (2013.01);
U.S. Cl.
CPC ...
G06F 21/566 (2013.01); G06F 21/52 (2013.01); G06F 2221/034 (2013.01);
Abstract

A creation of a first process is detected in a kernel space of the operating system executing on a computing device. An exec parent of the first process is determined. The exec parent identifies a second process within an ancestry of the first process that last performed an exec operation prior to the creation of the first process. A unique process identifier (UPID) associated with a process identifier (PID) of the first process is generated. The UPID is associated with the exec parent in a first mapping store that maps the PID to the UPID. Process activity of the first process executing in the operating system is tracked to generate process activity data that comprises the exec parent.


Find Patent Forward Citations

Kelly, Martin. (2026). Techniques for tracking executable images across forking operations (U.S. Patent No. 12762235). U.S. Patent and Trademark Office. https://idiyas.com/patent/badge/12762235

Data source: USPTO (United States Patent and Trademark Office) public patent records. Weekly synchronization. How IDiyas builds this profile

Loading…