US 11,899,536 B2
Autoscreenshot systems and methods for virtual operating system states
Collin Mitchell, Rochester, NY (US)
Assigned to DATTO, INC., Norwalk, CT (US)
Filed by DATTO, INC., Norwalk, CT (US)
Filed on Jul. 2, 2021, as Appl. No. 17/366,568.
Prior Publication US 2023/0004463 A1, Jan. 5, 2023
Int. Cl. G06F 11/00 (2006.01); G06F 11/14 (2006.01); G06F 9/4401 (2018.01); G06F 9/455 (2018.01); G06N 3/04 (2023.01); G11C 29/08 (2006.01)
CPC G06F 11/1448 (2013.01) [G06F 9/4401 (2013.01); G06F 9/45558 (2013.01); G06N 3/04 (2013.01); G11C 29/08 (2013.01); G06F 2009/45575 (2013.01)] 25 Claims
OG exemplary drawing
 
1. A method of evaluating the integrity of a process-of-interest associated with a protected machine, the method comprising:
(a) initiating, via an operating system managing the protected machine, the process-of-interest;
(b) taking, via the operating system managing the protected machine, a plurality of screenshots of display output while the process-of-interest is being initiated;
(c) communicating one or more of the plurality of screenshots of the display output to a prediction module;
(d) using the prediction module, determining a state classification for each screenshot of the plurality of screenshots of the display output using a trained model, based on one or more determined attributes associated with each screenshot of the plurality of screenshots, wherein the trained model is an artificial neural network;
(e) adding each screenshot of the plurality of screenshots of the display output and the state classification associated with each screenshot to a memory array;
(f) testing at least a first portion of the memory array to determine a consistency class for the process-of-interest based on screenshots and the associated state classifications stored in at least the first portion of the memory array, wherein the consistency class represents a steady state classification over a particular period of time;
(g) based on the consistency class determined based on at least the first portion of the memory array, performing at least one of the following:
(g1) repeating steps (b) through (g) and testing at least a second portion of the memory array to determine a consistency class for the process-of-interest based on the screenshots and the associated state classifications stored in at least the second portion of the memory array, and wherein the second portion of the memory array includes one or more screenshots and one or more state classifications not included in the first portion of the memory array; and
(g2) generating a report concerning the consistency class determined in connection with at least the first portion of the memory array, the report comprising a representative screenshot selected from the screenshots stored within the memory array and the consistency class.