Patent Document ID: 9679136
Application ID: 14943203
Patent Status: 1

Claim One:
1. A system for behavioral analysis, comprising: a processor; a non-transitory memory; a behavioral analysis application including instructions on the non-transitory memory, the instructions, when loaded and executed by the processor, configure the behavioral analysis application to: at a first moment in time, use anti-virus heuristics and memory forensics to create a first behavioral digest; store the first behavioral digest and a first set of a plurality of existing system executable objects; at a second moment in time, use anti-virus heuristics and memory forensics to create a second behavioral digest; store the second behavioral digest and a second set of a plurality of existing system executable objects; identify differences between the first behavioral digest and the second behavioral digest; identify differences between the first set and second set of existing system executable objects; apply a behavioral analysis rule to the identified differences between the behavioral digests and the sets of system executable objects; and based upon the behavioral analysis rule, determine whether any system executable objects are infected with malware.