Patent ID: 11907370
Assignee: CROWDSTRIKE, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 5:
6. A method comprising:
obtaining, via a communications interface, a test pattern from a security agent operating on a monitored computing device, the test pattern including:
a value that characterizes a portion of behavior exhibited by the monitored computing device and observed by the security agent, wherein the value is associated with an empty field of a pattern of behavior (PoB);

making available for selection, via a display device, a plurality of behavior identifiers and a plurality of dispositions for selection;
obtaining selections corresponding to a behavior identifier and a disposition from among the plurality of behavior identifiers and the plurality of dispositions, an individual behavior identifier of the plurality of behavior identifiers being associated with one or more dispositions;
based at least in part on obtaining the selections, creating a definition that includes the behavior identifier, the disposition, and the value; and
transmitting, via the communications interface, the definition to the security agent.