INCIDENT RESPONSE TOOL USING A DATA EXCHANGE LAYER SYSTEM

摘要

This disclosure describes systems, methods, and computer-readable media related to an incident response tool using data exchange layer. In some embodiments, a data collector may be generated by an incident response server. The incident response server may transmit a data collector to multiple broker servers, where each broker server may transmit the data collector to multiple user devices associated with the broker server. The incident response server may receive data from the data collectors executing on the user devices and may analyze the received data.

主权项

1. A computer-readable medium storing computer-executable instructions which, when executed by a processor, cause the processor to perform operations comprising:
configuring, by an incident response server, a data collector that will collect data on a user device where the data collector is stored; transmitting, by the incident response server, a copy of the data collector to a plurality of user devices through a data exchange layer system, wherein the data exchange layer system comprises a plurality of broker servers, each associated with a respective portion of the plurality of user devices; transmitting, by the incident response server, a request for a set of data from the data exchange layer system; and receiving, by the incident response server, the set of data from at least a subset of the plurality of broker servers, wherein the set of data is obtained from the respective copies of the data collector of a subset of user devices associated with the subset of the plurality of broker servers.