Patent ID: 7971257
Filing Date: 2011-06-28
Classification: H04L,H04W

Abstract:
1. A method of obtaining a network origin of a downloaded entity of interest, the method including the steps of, in a processing system: recording network locations of at least some files downloaded to the processing system; recording physical locations of the at least some files stored in one or more storage devices of the processing system; recording at least some events performed in the processing system by the at least some files downloaded to the processing system; identifying an entity of interest in the processing system; searching the recorded network locations and the recorded physical locations for a network location and a physical location of the entity of interest; using the at least some recorded events to search the recorded network locations and the recorded physical locations for a network location and a physical location for a file downloaded to the processing system by the identified entity of interest; and if the network location and the physical location of the entity of interest are identified, transmitting the network location and the physical location of the entity of interest and the network location and the physical location of the file downloaded to the processing system by the entity of interest to a remote processing system, wherein the remote processing system downloads the entity of interest and the file downloaded to the processing system directly from the transmitted network locations.