Patent ID: 11907370
Assignee: CROWDSTRIKE, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 10:
11. A non-transitory computer-readable medium having processor-executable instructions store thereon that, when executed by one or more processors, cause the processors to perform operations comprising:
receiving, via a communications interface, a definition file including a first value corresponding to an empty field of a pattern of behavior (PoB), wherein the empty field was generated by removing a portion of the PoB;
receiving behavior information regarding behavior exhibited by a computing device and corresponding to the PoB;
determining a test pattern based at least in part on the behavior information and detecting that the behavior information corresponds with at least part of the PoB; and
determining whether the test pattern matches a first union of the PoB with the empty field populated by the first value.