Abstract: A system and method for intercepting commands issued to a host server. An agent is installed on the host server and configured to intercept commands issued to the host server and to transmit indications of said commands to a collector for logging and evaluation. The collector includes rules for determining whether a command issued to the host is to be blocked. Collector rules may be informed by supplementary information from third party information systems. The agent queries the collector for whether a command is to be blocked, and also include rules for blocking commands without evaluation by the collector. Indications of intercepted commands are stored by the collector in databases accessible by an administrator for monitoring activity on the host server and for configuring rules for blocking commands issued to the server.

Abstract: A system and method for intercepting commands issued to a host server. An agent is installed on the host server and configured to intercept commands issued to the host server and to transmit indications of said commands to a collector for logging and evaluation. The collector includes rules for determining whether a command issued to the host is to be blocked. Collector rules may be informed by supplementary information from third party information systems. The agent queries the collector for whether a command is to be blocked, and also include rules for blocking commands without evaluation by the collector. Indications of intercepted commands are stored by the collector in databases accessible by an administrator for monitoring activity on the host server and for configuring rules for blocking commands issued to the server.