Patent ID: 11924241
Assignee: LOOKOUT, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 16:
17. A non-transitory computer-readable medium storing instructions which, when executed on at least one computing device configured to implement a network gateway, cause the at least one computing device to:
communicate with a plurality of endpoint agents running on endpoint devices, wherein the endpoint agents communicate with the network gateway using at least one internal network, and wherein each endpoint agent is configured to gather metadata associated with a respective endpoint device and send the gathered metadata to the network gateway;
receive, from at least one of the endpoint agents, first metadata;
gather second metadata associated with network traffic flowing through the network gateway, wherein the network traffic is associated with communications between the endpoint devices and at least one external computing device;
identify users associated with processes running on the endpoint devices;
identify, based at least on the first and second metadata, a first security risk for a first process associated with a first user of a first endpoint device; and
in response to identifying the first security risk, limit or block the first process on the first endpoint device, and limit or block a second process on a second endpoint device, wherein the second process is similar to the first process within a comparison threshold.