Patent ID: 11949694
Assignee: PALO ALTO NETWORKS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 44:
45. A computer program product embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
receiving a malware profile, wherein the malware profile comprises a sequence comprising a plurality of network activities, each respective one of which is defined using an n-tuple of respective attributes associated with executing a copy of a known malicious application that is associated with the malware profile;
analyzing a set of one or more logs for a set of entries occurring within a predetermined sliding time window that matches the malware profile;
determining, based at least in part on identifying the set of entries as matching the malware profile, that a host was compromised; and
in response to determining that the host has been compromised, taking a remedial action with respect to the host.