首页>
外国专利>
MECHANISM TO AUGMENT IPS/SIEM EVIDENCE INFORMATION WITH PROCESS HISTORY SNAPSHOT AND APPLICATION WINDOW CAPTURE HISTORY
MECHANISM TO AUGMENT IPS/SIEM EVIDENCE INFORMATION WITH PROCESS HISTORY SNAPSHOT AND APPLICATION WINDOW CAPTURE HISTORY
展开▼
机译:使用过程历史快照和应用程序窗口捕获历史记录来增强IPS / SIEM证据信息的机制
展开▼
页面导航
摘要
著录项
相似文献
摘要
A method to augment a plurality of IPS or SIEM evidence information is provided. The method may include monitoring a plurality of processes associated with a computer system. The method may also include identifying a plurality of processes that have network activity. The method may further include capturing the identified plurality of processes that have network activity. The method may also include storing the identified captured plurality of processes that have network activity. The method may include monitoring a plurality of selected programs associated with an operating system of the computer system. The method may also include identifying a plurality of selected programs that have network activity. The method may further include capturing a plurality of screen capture images associated with the identified plurality of selected programs. The method may include storing, by the second component the captured plurality of system process activity.
展开▼