Abstract: Systems and methods for tamper-proof detection triggering of automatic lockdown using a recoverable encryption mechanism issued from a secure escrow service. In an illustrative, non-limiting embodiment, an Information Handling System (IHS) may include: a processor; a secure storage device coupled to the processor, wherein the secure storage device comprises a container encrypted with a derived container key; and a memory coupled to the processor, the memory including program instructions stored thereon that, upon execution, cause the IHS to: receive a digital certificate from a remote server, wherein the digital certificate includes a public key and, in response to a detection of a tampering event, encrypt the derived container key using the public key.

Abstract: A method and system comprising a processor executing code instructions of a security filewall validation system for inspecting primitive file system operations to detect abnormal file types, abnormal file operation, or abnormal intended result files in violation of a security filewall rule set, a memory for storing the security filewall rule set describing permitted access to file types, file-paths, mounting points, data volume access rules, or data operations relating to the primitive file system operations where the security filewall validation system intercepts an attempted primitive file system operation and the security filewall validation system compares the attempted primitive file system operation including associated arguments indicating file, file location, and intended result to the security filewall rule set.

Abstract: Systems and methods for providing automatic system stop and boot-to-service OS for forensic analysis. In some embodiments, an Information Handling System (IHS) includes a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: detect an Indicator of Compromise (IoC); send, to a server, a message including the IoC; receive, from the server, a recovery instruction; and boot into a service OS identified in the recovery instruction, wherein the service OS is distinct from a main OS included in the IHS.

Abstract: Systems and methods for continued runtime authentication of Information Handling System (IHS) applications. In an illustrative, non-limiting embodiment, an IHS may include one or more processors and a memory coupled to the one or more processors, the memory including program instructions stored thereon that, upon execution by the one or more processors, cause the IHS to: receive a command to execute an application; initially verify a plurality of tokens, where a first token is provided by the application, a second token is provided by an application manager, and a third token is provided by a hardware component within the IHS; and execute the application in response the initial verification being successful.

Abstract: Systems and methods for backup data security classification. In an illustrative, non-limiting embodiment, an Information Handling System (IHS) may include one or more processors and a memory coupled to the one or more processors, the memory including program instructions stored thereon that, upon execution by the one or more processors, cause the IHS to: receive a backup policy that includes a plurality of backup profiles, where each of the plurality of backup profiles corresponds to a different user within an organization, and store a copy of electronic data associated with a given one of the different users according to a backup profile.

Abstract: A failure to load a primary operating system at a data processing device is identified. A partition in a volatile random access memory is allocated to store a second operating system. The second OS is stored at the partition. Information identifying the partition is stored at a first location accessible to a basic input output system executing at the data processing device.

Abstract: Systems and methods for managing network connections and priorities based on device profiles are described. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: receive instrumentation data from a plurality of devices coupled to the IHS via a network; receive observation data from the plurality of devices; correlate the observation data with the instrumentation data; and configure communications between the IHS and one or more the plurality of devices based, at least in part, upon the correlation.

Abstract: Systems and methods for protected local backup. In an illustrative, non-limiting embodiment, an Information Handling System (IHS) may include one or more processors and a memory coupled to the one or more processors, the memory including program instructions stored thereon that, upon execution by the one or more processors, cause the IHS to: receive, via a file system filter driver, a request targeting a file system within a storage device, wherein the file system filter driver is owned by a backup application; and reject the request, via the file system filter driver, in response to the request having been issued by an application other than the backup application.

Abstract: Software services are managed from a single machine performing a service. Service providers offering SaaS applications solicit the single machine. Each service provider provides roles and device requirements for performing the corresponding SaaS. The single machine maintains a database that logs the software services offered by the service providers. Whenever a software service is needed, the single machine inventories its client devices for their resource capabilities and compares to the device requirements in the database. The database reveals the client machine(s) that best performs the role for the corresponding SaaS. Software services are thus integrated and managed from the single machine, thus allowing software services to be efficiently and quickly selected as network resources emerge.

Abstract: Systems and methods for exporting failure and diagnostic data and securing privileges in a service Operating System (OS). In some embodiments, an Information Handling System (IHS) includes a processor; and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: identify a malfunction; store malfunction data in a predefined location; detect the coupling of an external device to the IHS; and export the malfunction data from the predefined location to the external device.

Abstract: A storage device failure recovery system includes a storage IHS and a user IHS coupled together over a network. The user IHS includes a storage system having a storage device, and a storage repair function that periodically provides a storage device image over the network to the storage IHS using data from the storage device. The storage repair function detects a failure of the storage device and streams an operating system on the user IHS using the storage device image stored on the storage IHS. While streaming the operating system on the user IHS using the storage device image stored on the storage IHS, the storage repair function analyzes the failure of the storage device, determines a storage system failure recovery procedure, and performs the storage system failure recovery procedure to restore the storage system while a user remains productive on the user IHS via the streamed operating system.

Abstract: Systems and methods for providing service and to computing devices. In some embodiments, an Information Handling System (IHS) includes a Basic I/O System (BIOS) and a memory coupled to the BIOS, the memory including program instructions stored thereon that, upon execution by the IHS, cause the IHS to: determine that the IHS is operating in a degraded state; and initiate one or more support, diagnostics, or remediation operations in response to the determination.

Abstract: A method of tunneling management traffic includes receiving at a managed system a control feature from a proxy-managed system that is connected to the managed system, determining that the proxy-managed system is not visible to a management system, providing the control feature to the management system in response to determining that the proxy-managed system is not visible, receiving a modification to the control feature from the management system, and providing, from the managed system, the modification to the control feature to the proxy-managed system in response to receiving the modification to the control feature from the management system.

Abstract: A wireless access point profile is retrieved from a basic input output system (BIOS) non-volatile random-access memory (NVRAM). The wireless access point profile is provided to a wireless local area network controller.

Abstract: Systems and methods smart diagnosis using hosted resources with intelligent altering of boot order. In some embodiments, an Information Handling System (IHS) may include a processor and a memory coupled to the processor, the memory having program instructions stored thereon that, upon execution by the processor, cause the IHS to: execute a first diagnostic module; identify a software or hardware malfunction as a result of the execution of the first diagnostic module; communicate the malfunction to a backend server; receive, from the backend server, an indication of a second diagnostic module to be subsequently executed by the IHS; and execute the second diagnostic module.

Abstract: A remediation server receives a service request from a data processing device, the service request to diagnose a failure to load an operating system at the data processing device. A data storage device local to data processing device is identified, the data storage device storing the operating system. A diagnostic process is provided at the remediation server, the diagnostic process to mount the data storage device. A diagnostic service is performed based on information stored at the data storage device.

Abstract: A device management system includes a system management information handling system (IHS) that is coupled to a network. A first device is included in the device management system and is not configured to communicate with the system management IHS. A plurality of user IHSs are each configured to communicatively couple to the first device and are each configured to communicatively couple to the system management IHS through the network. Each of the plurality of user IHSs is configured to retrieve device information from the first device when that user IHS is communicatively coupled to the first device. Each of the plurality of user IHSs is configured to provide the device information for the first device to the system management IHS when that user IHS is communicatively coupled to the system management IHS through the network.

Abstract: A method of tunneling management traffic includes receiving at a managed system a control feature from a proxy-managed system that is connected to the managed system, determining that the proxy-managed system is not visible to a management system, providing the control feature to the management system in response to determining that the proxy-managed system is not visible, receiving a modification to the control feature from the management system, and providing, from the managed system, the modification to the control feature to the proxy-managed system in response to receiving the modification to the control feature from the management system.

Abstract: A system, method, and computer-readable medium for performing a secure userless device software deployment operation. The secure userless device software deployment operation enables a client information handing system and a server information handling system to independently and deterministically construct a host reference (such as a host universal resource locator (URL)). In certain embodiments, the host reference is used for the SaaS connection based on a fixed portion plus a unique portion created using a client's public key as an identifier. In certain embodiments, the secure userless device software deployment operation leverages a management system to broker a SaaS service deployment. In certain embodiments, the secure userless device software deployment operation securely attaches a managed userless device to a tenant based SaaS offering by leveraging a connection plug-in and temporary/ephemeral URL architecture with a one-time use construct.

Abstract: An information handling system includes a network interface, a radio frequency interface, and a processor. The processor is configured to receive a call initiation signal from a remote system through the network interface, establish a connection with a portable communication device through the radio frequency interface, and accept a call from the remote system. Additionally, the processor is further configured to route audio signals related to the call between the portable communication device and the remote system.