US 12,328,325 B1
Probabilistic event linking
Sseziwa Mukasa, Salem, MA (US); and Daniel Brown, Ipswich, MA (US)
Assigned to CrowdStrike, Inc., Sunnyvale, CA (US)
Filed by CrowdStrike, Inc., Sunnyvale, CA (US)
Filed on Nov. 27, 2024, as Appl. No. 18/963,186.
Claims priority of provisional application 63/677,103, filed on Jul. 30, 2024.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/1416 (2013.01) 14 Claims
OG exemplary drawing
 
1. A method comprising:
receiving an indication of an occurrence of a first event in a computing environment;
calculating a first estimated rate of occurrence of the first event based on a first cache associated with the first event, wherein calculating the first estimated rate of occurrence comprises calculating a weighted average of time between occurrences of the first event stored in the first cache;
identifying an occurrence of a second event within a threshold amount of time prior to the occurrence of the first event, wherein the threshold amount of time is determined based on the first estimated rate of occurrence of the first event;
calculating a second estimated rate of occurrence of the second event based on a second cache associated with the second event; and
determining, by a processing device, whether the occurrence of the first event and the occurrence of the second event have a common cause based on the first estimated rate of occurrence of the first event and the second estimated rate of occurrence of the second event.