Patent ID: 11886600
Assignee: MICROSOFT TECHNOLOGY LICENSING, LLC
Field: Computer technology (Electrical engineering)
Classification: CPC G  H | IPC G  H

Claim 0:
1. A computing system comprising:
a malicious activity detection system configured to detect malicious activity representing an unauthorized user access in an execution environment;
a remediation action execution system configured to execute an intrusion remediation action in the execution environment in response to detection of the malicious activity; and
a remediation validation system configured to:
automatically generate, based on a scheduling criterion, an isolated computing environment that
includes at least one machine selected from a plurality of machines in the execution environment based on a selection criterion, and
is isolated from the execution environment in which the malicious activity detection system is configured to detect the malicious activity,

set a test condition in the isolated computing environment, the test condition representing the malicious activity,
execute the intrusion remediation action in the isolated computing environment,
generate an efficacy indicator that indicates a remediation action efficacy based on execution of the intrusion remediation action in the isolated computing environment, and
generate an indication of a remediation action validation based on the efficacy indicator.