Distributed digital security system
摘要
說(shuō)明書(shū)
As an example, if cloud elements of the distributed security system 100 are configured to determine how many, and/or how often, files are accessed on one or more client devices 104, the cloud elements many not need detailed event data 122 about every individual file access event that occurs on the client devices 104. As another example, registry events may occur thousands of times per minute, or more, on a client device 104. While it may be inefficient or costly to send event data 122 about each individual registry event to the security network 106, it may be sufficient to simply send the security network 106 a count of how many such registry events occurred over a certain period of time. Accordingly, a configuration 132 may instruct the counting engine 614 to, based on event data 122, generate statistical data 616 including a count of the number of certain types of event occurrences on a client device 104 over a period of time. The security agent 108 can then send the statistical data 616 reflecting the overall count of such event occurrences to the security network 106 as event data 122, or another type of report, instead of sending event data 122 about each individual event occurrence to the security network 106.
