Patent ID: 11876784
Assignee: CROWDSTRIKE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 16:
17. One or more non-transitory computer-readable media storing computer-executable instructions that, when executed by one or more processors of a computing device, cause the one or more processors to perform operations comprising:
receiving a request, from a client process executing on the computing device, that the client process be bound with a service communication port on the computing device that is associated with a Local Procedure Call (LPC) service also executing on the computing device;
binding, in response to the request, a client communication port on the computing device that is associated with the client process to a security agent proxy that is also executing on the computing device, instead of to the service communication port on the computing device that is associated with the LPC service, wherein:
binding the client communication port to the security agent proxy, instead of to the service communication port, causes the security agent proxy to be, to the client process, indistinguishable from the LPC service;

intercepting, by the security agent proxy and based on the binding, a message for the LPC service sent by the client process;
analyzing, by the security agent proxy, the message by at least one of observing, logging, or modifying the message; and
forwarding, by the security agent proxy, the message to the LPC service following analysis of the message by the security agent proxy.