US 12,255,918 B2
Techniques for determining threat intelligence for network infrastructure analysis
Adam Hunt, El Cerrito, CA (US); Jonas Edgeworth, San Francisco, CA (US); Chris Kiernan, San Francisco, CA (US); Elias Manousos, San Francisco, CA (US); and David Pon, Sunnyvale, CA (US)
Assigned to Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed by Microsoft Technology Licensing, LLC, Redmond, WA (US)
Filed on Jun. 21, 2021, as Appl. No. 17/353,641.
Application 17/353,641 is a continuation of application No. 15/677,956, filed on Aug. 15, 2017, granted, now 11,044,269, issued on Jun. 22, 2021.
Claims priority of provisional application 62/375,068, filed on Aug. 15, 2016.
Prior Publication US 2021/0314354 A1, Oct. 7, 2021
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); G06F 21/51 (2013.01); G06F 21/56 (2013.01); H04L 41/22 (2022.01); H04L 43/00 (2022.01)
CPC H04L 63/1483 (2013.01) [G06F 21/51 (2013.01); G06F 21/562 (2013.01); H04L 41/22 (2013.01); H04L 63/08 (2013.01); H04L 63/1425 (2013.01); H04L 43/14 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A computer-implemented method comprising, at a computer system:
accepting a crawl configuration, which specifies a sequence of internet-facing assets to be monitored, based on verification that the crawl configuration is free of errors;
selecting a proxy server via which to access an internet-facing asset, which is included in the sequence of internet-facing assets, based on the crawl configuration, the proxy server enabling a bot to anonymously interact with the internet-facing asset;
selecting the bot, which obtains data from the internet-facing asset by accessing the internet-facing asset anonymously via the proxy server, based on the crawl configuration;
monitoring the internet-facing asset according to the crawl configuration, wherein the monitoring comprises identifying an event that is indicated by the data, which is obtained by the bot, by analyzing the data;
based on the event being identified, causing data related to the event to be displayed on a display device;
analyzing network data associated with the event; and
causing information related to the network data to be displayed on the display device.