| CPC G06F 21/6281 (2013.01) [G06F 21/629 (2013.01)] | 19 Claims |

|
1. A computing device, comprising:
memory configured to store an operating system; and
processing circuitry operatively connected to the memory and configured to:
modify a virtual method table to point to a hooking function associated with an agent plugin, wherein the agent plugin is configured to intercept requests relating to a file using the hooking function;
intercept a request in a user account of a logged-in user to execute therein a command on the file according to first privileges assigned thereto;
extract file information for the file from the intercepted request and redirect the file information to an agent service cooperating with the operating system;
determine whether to execute the command on the file in the user account according to second privileges different from the first privileges based on responses to a set of custom messages defined in a policy file; and
responsive to determining to execute the command on the file in the user account according to the second privileges, cause the command to be executed on the file in the user account according to the second privileges.
|