Patent ID: 11902322
Assignee: DARKTRACE HOLDINGS LIMITED
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 12:
13. The non-transitory computer readable medium comprising computer readable code operable of claim 10 containing further instructions, when executed by one or more processing apparatuses in the computer system to perform additional steps, comprising:
causing the tracking module to determine when a connection has been established for legitimate communications between a first network device in its subnet and a second device at a target address, where the gap determination module is configured to determine when a gap of time is found to communicate to the trigger module to send the generated spoofed transmission and/or response communication, which is addressed to go the target address, via the established connection, in order to check if a successful protocol communication could be reached from the cyber-security response-orchestrator engine to the second device at the target network address, where the cyber-security response-orchestrator engine is further configured to carry out one or more autonomous actions that the cyber-security response-orchestrator engine can take to mitigate the cyber threat is to orchestrate cutting off network connections between the first network device and the second device when the cyber threat is detected.