Patent ID: 11876829
Assignee: ATTACKIQ, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 7:
8. The method of claim 1, wherein accessing the packet capture file comprises:
accessing a packet capture file comprising a population of packet fragments that represent packet interchanges between hosts in communication with the second computer network during the malicious attack on the second computer network during the first time period;
grouping packet fragments, in the population of packet fragments, into a set of clusters of packet fragments based on congruent addresses of source machines, congruent addresses of destination machines, and continuity of timestamps associated with packet fragments in the population of packet fragments; and
for each cluster of packet fragments, in the set of clusters of packet fragments:
defining an order of packet fragments in the cluster of packet fragments based on timestamps of packet fragments in the cluster of packet fragments; and
recombining the cluster of packet fragments into a singular data packet, in the set of data packets, based on the order.