Patent ID: 11916943
Assignee: FORESCOUT TECHNOLOGIES, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 9:
10. A system comprising:
a memory; and
a processing device, operatively coupled to the memory, to:
access a domain name system (DNS) response packet from an intermediate translation device acting as a local cache of name translation traffic for one or more devices within a network, wherein the DNS response packet includes a domain name and an internet protocol (IP) address;
access the domain name and the IP address from the DNS response packet;
access a packet comprising the IP address of the DNS response packet, wherein the packet is sent from a device of the one or more devices;
obtain the domain name from the DNS response packet with the IP address that matches the IP address of the packet; and
determine a security characteristic associated with the device including determining an indication of compromise (IoC) of the device based on the domain name.