Patent ID: 11924241
Assignee: LOOKOUT, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 20:
21. A system comprising:
at least one computing device; and
memory storing instructions configured when executed to cause the at least one computing device to:
provide at least one communication interface, the communication interface configured to communicate over at least one network with a plurality of endpoint devices, wherein each endpoint device runs a respective endpoint agent, and wherein each endpoint agent is configured to gather metadata associated with its respective endpoint device and send the gathered metadata to an API mode cloud access security broker (CASB); and
implement the CASB, wherein the CASB is configured to:
receive, from a first endpoint agent, first metadata corresponding to a first endpoint device;
identify, based at least on the first metadata, a security risk; and
in response to identifying the security risk, perform at least one security action, wherein performing the security action comprises causing limiting or blocking of at least one first process associated with the identified security risk, and wherein the first process is limited or blocked on the first endpoint device and one or more other endpoint devices;
wherein performing the security action comprises determining a second process that is similar to the first process within a comparison threshold, and causing limiting or blocking of the second process on at least one endpoint device.