Patent ID: 11876784
Assignee: CROWDSTRIKE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A computer-implemented method, comprising:
intercepting a bind request from a client process executing on a computing device, wherein the bind request identifies a Local Procedure Call (LPC) service that is also executing on the computing device;
binding, in response to the bind request, a client communication port on the computing device that is associated with the client process to a security agent proxy that is also executing on the computing device, instead of to a service communication port on the computing device that is associated with the LPC service, wherein:
binding the client communication port to the security agent proxy, instead of to the service communication port, causes the security agent proxy to be, to the client process, indistinguishable from the LPC service;

intercepting, by the security agent proxy, and based on the binding, a message for the LPC service that was sent by the client process;
analyzing, by the security agent proxy, the message by at least one of observing, logging, or modifying the message; and
forwarding, by the security agent proxy, the message to the LPC service following analysis of the message by the security agent proxy.