Patent ID: 11886600
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 7:
8. A computer-implemented method comprising:
detecting malicious activity representing an unauthorized user access in an execution environment;
executing an intrusion remediation action in the execution environment in response to detection of the malicious activity;
automatically generating, based on a scheduling criterion, an isolated computing environment that
includes at least one machine selected from a plurality of machines in the execution environment based on a selection criterion, and
is isolated from the execution environment;

setting a test condition in the isolated computing environment, the test condition representing the malicious activity;
executing the intrusion remediation action in the isolated computing environment,
generating an efficacy indicator that indicates a remediation action efficacy based on execution of the intrusion remediation action in the isolated computing environment, and
generating an indication of a remediation action validation based on the efficacy indicator.