Patent ID: 11886600
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 12:
13. A computing system comprising:
at least one processor; and
memory storing instructions executable by the at least one processor, wherein the instructions, when executed, cause the computing system to:
detect malicious activity representing an unauthorized user access in an execution environment;
execute an intrusion remediation action in the execution environment in response to detection of the malicious activity;
automatically generate, based on a scheduling criterion, an isolated computing environment that
includes at least one machine selected from a plurality of machines in the computing system based on a selection criterion, and
is isolated from the execution environment;

set a test condition in the isolated computing environment, the test condition representing the malicious activity;
execute the intrusion remediation action in the isolated computing environment,
generate an efficacy indicator that indicates a remediation action efficacy based on execution of the intrusion remediation action in the isolated computing environment, and
generate an indication of a remediation action validation based on the efficacy indicator.