US 11,747,966 B2
Detecting paste and other types of user activities in computer environment
Guy Ziv, Holon (IL); Doron Seijffers, Avichail (IL); Nir Barak, Karmei Yosef (IL); and Lior Tal, Tel Aviv (IL)
Assigned to Proofpoint, Inc., Sunnyvale, CA (US)
Appl. No. 17/419,469
Filed by Proofpoint, Inc., Sunnyvale, CA (US)
PCT Filed Jan. 3, 2020, PCT No. PCT/US2020/012133
§ 371(c)(1), (2) Date Jun. 29, 2021,
PCT Pub. No. WO2020/142654, PCT Pub. Date Jul. 9, 2020.
Claims priority of provisional application 62/788,273, filed on Jan. 4, 2019.
Prior Publication US 2022/0075492 A1, Mar. 10, 2022
Int. Cl. G06F 3/0484 (2022.01); G06F 3/0482 (2013.01); G06F 3/0489 (2022.01)
CPC G06F 3/0484 (2013.01) [G06F 3/0482 (2013.01); G06F 3/0489 (2013.01)] 29 Claims
OG exemplary drawing
 
1. A computer-based method comprising:
receiving, at a computer-based agent on a first computer, an indication from an operating system of the first computer that a user has performed a first action at the first computer that may have caused a context menu with a paste option to open on a screen of the first computer;
subsequently receiving, at the computer-based agent of the first computer, an indication from the operating system of the first computer that the user has performed a second action at the first computer that may have amounted to a selection of the paste option on the context menu;
in response to the indication from the operating system of the first computer that the user has performed the second action, determining, with the computer-based agent on the first computer. if the second action by the user amounted to a selection of the paste option on the context menu and thereby caused a paste action to occur;
applying one or more rules, stored in a server data store, to determine if the selection of the paste option warrants sending an alert notification to a system administrator; and
in response to determining that the selection of the paste option warrants sending the alert notification to the system administrator based on the applying of the one or more rules, presenting the alert notification at a screen of a second computer indicating that the computer-based agent has determined that the paste action occurred at the first computer, wherein the alert notification identifies the user, a session associated with the selection of the paste option, and an application associated with the selection of the paste option.