Abstract: The disclosed computer-implemented method for time-shifted detection of security threats may include (1) collecting history data that describes activity of the computing system during a past time period, (2) archiving the history data in association with the past time period, (3) identifying a potential security threat to the computing system that was unknown to a software security system during the past time period, and (4) in response to identifying the potential security threat, replaying the history data through the software security system to enable the software security system to determine whether the computing system was affected by the potential security threat during the past time period. Various other methods, systems, and computer-readable media are also disclosed.

Abstract: A malware detection agent operating on a computing device detects one or more indicators of a potential data loss threat. Sensitive data is identified based on at least one of a logical location or a physical location of the sensitive data. One or more data loss prevention policies are enabled to protect the sensitive data until the potential data loss threat is resolved.

Abstract: A computer-implemented method for evaluating the health of computing systems based on when operating-system changes occur is disclosed. In one example, this method may include: 1) identifying an operating-system change made to a computing system, 2) determining when the operating-system change occurred, and then 3) assessing the health of the computing system based at least in part on when the operating-system change occurred. Various other methods, systems, and computer-readable media are also disclosed.