Michael R Corder

US Patent:

20220407881, Dec 22, 2022

Filed:

May 26, 2022

Appl. No.:

17/826011

Inventors:

- Seattle WA, US
Michael Ryan Corder - Seattle WA, US
Edmund Hope Driggs - Seattle WA, US
Benjamin Thomas Higgins - Shoreline WA, US
Michael Kerber Krause Montague - Lake Forest Park WA, US
Kenneth Perrault - Seattle WA, US
Jesse Abraham Rothstein - Seattle WA, US
Jonathan Jacob Scott - Seattle WA, US
Marc Adam Winners - Seattle WA, US
Xue Jun Wu - Seattle WA, US

International Classification:

H04L 9/40
H04L 43/062

Abstract:

Embodiments are directed to monitoring network traffic using network monitoring computers (NMCs). Metrics may be determined based on monitoring network traffic associated with a plurality of entities each associated with a profile that includes the metrics for each entity. Beaconing metrics associated with beaconing activity may be determined based on the metrics. The profile of each entity may be compared with the beaconing metrics to determine the entities that may be engaged in beaconing activity. The entities may be characterized based on beaconing activity such that the beaconing activity includes communication with endpoints associated with the third parties, employing communication protocols associated with the third-parties, or exchanging payloads consistent with the beaconing activity. Reports that include information associated with the entities and its beaconing activity may be generated.