Patent ID: 11916943
Assignee: FORESCOUT TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 0:
1. A method comprising:
accessing network traffic;
accessing name translation traffic of the network traffic from an intermediate translation device acting as a local cache of name translation traffic for one or more devices within a network;
accessing name information and address information from the name translation traffic;
storing the name information and address information;
accessing subsequent network traffic sent by a device of the one or more devices, wherein the network traffic includes address information;
obtaining the name information based on determining a match between address information of the subsequent network traffic and the address information of the name translation traffic; and
associating network traffic from the device with the name information; and
determining an indication of compromise (IoC) of the device based on the name information.