Patents & Intellectual Property

Systems and methods for detecting malicious activity. The methods include receiving at an interface at least one feature of a digital certificate; detecting an anomaly in the at least one feature of the digital certificate; identifying at least one process or file associated with the digital certificate upon detecting the anomaly; and analyzing at least one property associated with the identified process or file to identify it as malicious and execute remedial action.

Methods and apparatus for detecting malware via screen capture analysis. The system detects process execution, captures screen buffers, and compares them against a database of malicious images to trigger responsive actions based on similarity thresholds.

Methods, apparatus, systems and articles of manufacture for detecting malware via analysis of a screen capture. The system detects macro-executing processes, captures UI images, and analyzes similarity to known malicious interfaces to trigger responsive actions.

Methods and apparatus for detecting malware via screen capture analysis. The system detects process execution, captures screen buffers, and compares them against a database of malicious images to trigger responsive actions based on similarity thresholds.