System and method for correlating filesystem events into meaningful behaviors
US12287872B2 · kind B2 · utility
0Cited by
11References
20Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Aug 31, 2021 |
| Grant date | Apr 29, 2025 |
| Priority date | — |
| Expiry date | Nov 21, 2043 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2209/542
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
One example method includes integrating user space applications with kernel space events including primitives. The events are intercepted in kernel space and processed in user space. The events can be stored in a session cache that allows a holistic view of behavior to be determined with regard to resources of the computing system. The events in the session cache can be correlated to user or process behavior by provided a time-based view of the events.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.