公开(公告)号：US20230328076A1

公开(公告)日：2023-10-12

申请号：US18116629

申请日：2023-03-02

Applicant: CrowdStrike, Inc.

Inventor： David F. Diehl ,  Michael Edward Lusignan ,  Thomas Johann Essebier

IPC: H04L9/40 ,  G06F16/2455

CPC classification number: H04L63/1416 ,  G06F16/24568 ,  H04L63/1425 ,  G06Q50/265

Abstract: A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and/or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.

公开(公告)号：US11616790B2

公开(公告)日：2023-03-28

申请号：US16849450

申请日：2020-04-15

Applicant: CrowdStrike, Inc.

Inventor： David F. Diehl ,  Michael Edward Lusignan ,  Thomas Johann Essebier

IPC: H04L9/40 ,  G06F16/2455 ,  G06Q50/26

Abstract: A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and/or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.

公开(公告)号：US20230164151A1

公开(公告)日：2023-05-25

申请号：US18094303

申请日：2023-01-06

Applicant: CrowdStrike, Inc.

Inventor： David F. Diehl ,  Nora Lillian Sandler ,  Matthew Edward Noonan ,  Christopher Robert Gwinn ,  Thomas Johann Essebier

IPC: H04L9/40 ,  G06F21/54 ,  H04L41/042 ,  H04L41/28

CPC classification number: H04L63/1416 ,  G06F21/54 ,  H04L41/042 ,  H04L41/28 ,  H04L63/1441

Abstract: A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and/or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.

公开(公告)号：US11563756B2

公开(公告)日：2023-01-24

申请号：US16849411

申请日：2020-04-15

Applicant: Crowdstrike, Inc.

Inventor： David F. Diehl ,  Nora Lillian Sandler ,  Matthew Edward Noonan ,  Christopher Robert Gwinn ,  Thomas Johann Essebier

IPC: G06F11/00 ,  H04L9/40 ,  G06F21/54 ,  H04L41/042 ,  H04L41/28

Abstract: A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and/or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.

公开(公告)号：US20210329013A1

公开(公告)日：2021-10-21

申请号：US16849450

申请日：2020-04-15

Applicant: CrowdStrike, Inc.

Inventor： David F. Diehl ,  Michael Edward Lusignan ,  Thomas Johann Essebier

IPC: H04L29/06 ,  G06F16/2455

Abstract: A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and/or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.

公开(公告)号：US12021884B2

公开(公告)日：2024-06-25

申请号：US18116629

申请日：2023-03-02

Applicant: CrowdStrike, Inc.

Inventor： David F. Diehl ,  Michael Edward Lusignan ,  Thomas Johann Essebier

IPC: H04L9/40 ,  G06F16/2455 ,  G06Q50/26

CPC classification number: H04L63/1416 ,  G06F16/24568 ,  H04L63/1425 ,  G06Q50/265

Abstract: A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and/or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.

公开(公告)号：US20230328082A1

公开(公告)日：2023-10-12

申请号：US18334260

申请日：2023-06-13

Applicant: CrowdStrike, Inc.

Inventor： David F. Diehl ,  Thomas Johann Essebier

IPC: H04L9/40 ,  H04L41/042 ,  H04L41/28 ,  H04L43/06

CPC classification number: H04L63/1416 ,  H04L41/042 ,  H04L41/28 ,  H04L43/06 ,  H04L63/1441 ,  H04L63/1425

Abstract: A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and/or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.

公开(公告)号：US20210329014A1

公开(公告)日：2021-10-21

申请号：US16849496

申请日：2020-04-15

Applicant: CrowdStrike, Inc.

Inventor： David F. Diehl ,  Thomas Johann Essebier

IPC: H04L29/06 ,  H04L12/24 ,  H04L12/26

Abstract: A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and/or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.

公开(公告)号：US20240305654A1

公开(公告)日：2024-09-12

申请号：US18663974

申请日：2024-05-14

Applicant: CrowdStrike, Inc.

Inventor： David F. Diehl ,  Michael Edward Lusignan ,  Thomas Johann Essebier

IPC: H04L9/40 ,  G06F16/2455 ,  G06Q50/26

CPC classification number: H04L63/1416 ,  G06F16/24568 ,  H04L63/1425 ,  G06Q50/265

Abstract: A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and/or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.

公开(公告)号：US12047399B2

公开(公告)日：2024-07-23

申请号：US18094303

申请日：2023-01-06

Applicant: CrowdStrike, Inc.

Inventor： David F. Diehl ,  Nora Lillian Sandler ,  Matthew Edward Noonan ,  Christopher Robert Gwinn ,  Thomas Johann Essebier

IPC: G06F21/54 ,  H04L9/40 ,  H04L41/042 ,  H04L41/28

CPC classification number: H04L63/1416 ,  G06F21/54 ,  H04L41/042 ,  H04L41/28 ,  H04L63/1441

Abstract: A distributed security system can include instances of a compute engine that can execute either locally in security agents on client devices or as cloud instances in a security network. Event data can be processed by elements of the distributed security system according to centrally-defined ontological definitions and/or configurations. Bounding managers of local security agents can control how much event data is sent to the security network. A storage engine in the security network can store event data received from client devices, can route event data to other elements of the security network, including cloud instances of the compute engine. An experimentation engine of the security network can also at least temporarily adjust other elements of the distributed security system during experiments or tests.