Patent ID: 11882134
Assignee: VMWARE LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  B  G | IPC B  G  H

Claim 14:
15. A non-transitory computer readable storage medium having stored thereon program code executable by a computer system, the program code embodying a method comprising:
identifying a new threat in a first run of an attack on an endpoint node;
upon identifying the new threat, importing a primitive rule;
compiling the primitive rule;
deploying the compiled primitive rule on the endpoint node;
generating, using the deployed primitive rule, additional information about the new threat in a second run of the attack;
based on the additional information about the new threat, generating a new rule;
compiling the new rule;
deploying the compiled new rule on the endpoint node; and
blocking, using the deployed new rule, the new threat in a third run of the attack.