SECURE FIREWALL CONFIGURATIONS

Abstract: a kernel driver on an endpoint uses a process cache to provide a stream of events associated with processes on the endpoint to a data recorder. the process cache can usefully provide related information about processes such as a name, type or path for the process to the data recorder through the kernel driver. where a tamper protection cache or similarly secured repository is available, this secure information may also be provided to the data recorder for use in threat detection, forensic analysis and so forth.

Inventor(s): Richard S. Teal

CPC Classification: G06F21/54 (by adding security routines or objects to programs)

Search for rejections for patent application number 20250165588