PATENT CLAIM ANALYSIS

Application Number: 15946026
Application Type: Utility
Filing Date: 2018-04
Publication Date: 2018-08
Patent Classification: ["726", "001000"]

Abstract:
A data recorder stores endpoint activity on an ongoing basis as sequences of events that causally relate computer objects such as processes and files. When a security event is detected, an event graph may be generated based on these causal relationships among the computing objects. For a root cause analysis, the event graph may be traversed in a reverse order from the point of an identified security event (e.g., a malware detection event) to preceding computing objects, while applying one or more cause identification rules to identify a root cause of the security event. Once a root cause is identified, the event graph may be traversed forward from the root cause to identify other computing objects that are potentially compromised by the root cause.

Claim (Index 16):
The method of  claim 15 , wherein the first process invoking the second process includes at least one of a spawning, a hijacking, and a remote launch over a network.

Metadata:
- Claim Count in Document: 41.0
- Percentile: 91.0
- Lexical Diversity: 1.8
- Patent Class: 726.0
- Transitional Phrase Type: none
- Component Type: 0
- Foreign Priority: False
- Related Applications: ['15130244', '15924449', '15484830', '15924460', '14485774']

Analysis Scores:
- 35 USC 101 Eligibility (BERT): 0.3381840997835184
- 35 USC 102 Novelty (BERT): 0.5396745302193339
- Combined Prediction Score: 0.3583331428271
- Mean Citation Score: 321.10536600000006
- Max Citation Score: 391.3303
- Similarity Product: 324.5844433189035

Labels:
- Claim Label 101: 1
- Claim Label 102: 1
- Claim Label 103: 1
- Claim Label 112: 1
- Combined Label: 1
- Label 101 Adjusted: 1

Dataset: test