公开(公告)号：US20200028890A1

公开(公告)日：2020-01-23

申请号：US16430336

申请日：2019-06-03

Applicant: Tanium Inc.

Inventor： Andrew R. White ,  Zakary A. Kus ,  Michael W. Broome ,  Christian L. Hunt ,  Rahul R. Jaswa

IPC: H04L29/08 ,  G06F16/22 ,  H04L29/12 ,  H04L12/24

Abstract: This application is directed to a mapping method performed at a computational machine in a linear communication orbit. The computational machine receives an application definition the linear communication orbit. The application definition specifies criteria for establishing whether the computational machine executes a specified application, a component of the specified application, or communicate with another node executing the specified application or a component of the specified application. While a plurality of events are occurring locally at the computational machine, the computational machine identifies one or more operations meeting the application definition in real-time. The identified one or more operations meeting the application definition, and associated metadata are stored in a local mapping database of the computational machine and returned to the server system through the linear communication orbit in response to a map request received through the linear communication orbit.