Patent ID: 11916943
Assignee: FORESCOUT TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 14:
15. A non-transitory computer readable medium having instructions encoded thereon that, when executed by a processing device, cause the processing device to:
access, from an intermediate translation device acting as a local cache of name translation traffic for one or more devices within a network, a first packet comprising name information and address information;
store the name information and address information;
monitor network traffic for an address matching the stored address information;
obtain the name information based on determining a match between an address portion of a second packet and the stored address information, wherein a device of the one or more devices is the sender of the second packet; and
determine a characteristic associated with the device that sent the second packet based on the name information associated with the stored address information, including determining an indication of compromise (IoC) of the device based on the name information.