Patent ID: 11876784
Assignee: CROWDSTRIKE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 12:
13. A computing device, comprising:
one or more processors; and
memory storing computer-executable instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising:
receiving, from a client process executing on the computing device, an indication of a communication session between the client process and a Local Procedure Call (LPC) service that is also executing on the computing device;
binding a client communication port on the computing device that is associated with the client process to a security agent proxy that is also executing on the computing device, instead of to a service communication port on the computing device that is associated with the LPC service, wherein:
binding the client communication port to the security agent proxy, instead of to the service communication port, causes the security agent proxy to be, to the client process, indistinguishable from the LPC service;

intercepting, by the security agent proxy and based on the binding, a message sent by a first one of the client process or the LPC service to a second one of the client process or the LPC service;
analyzing, by the security agent proxy, the message by at least one of observing, logging, or modifying the message; and
forwarding, by the security agent proxy, the message to the second one of the client process or the LPC service following analysis of the message by the security agent proxy.