Abstract: Methods and systems for managing intrusion events for endpoint devices are disclosed. To manage intrusion events, an endpoint device may include a management controller. In response to an intrusion event, the management controller may perform a forensic analysis to identify an impact of the intrusion event. The management controller may snoop communications between hardware components of the endpoint device to identify any hardware components compromised by the intrusion event. A forensic report may be obtained based on the snooped communications and an action set may be performed to remediate the impact of the intrusion event. The forensic report may also be provided to a remote server via an out of band communication channel.

Abstract: Methods and systems for managing data for a data processing system are disclosed. To manage the data, a management controller hosted by the data processing system may generate a portion of telemetry data based on operation data obtained from hardware resources of the data processing system and a subscription from a management system indicating a request to receive the portion of telemetry data. Once generated, the portion of telemetry data may be provided by the management controller to the management system using an out-of-band communication channel. The management controller may subsequently obtain instructions from the management system based on the telemetry data for use in updating operation of the data processing system.

Abstract: Methods and systems for managing tampering detection for endpoint devices are disclosed. To manage tampering detection, an endpoint device may include an out of band management controller. The management controller may configure a tamper detection device to monitor communications to and from hardware components of hardware resources of the endpoint device while the management controller is inactive. The tamper detection device may compare characteristics of monitored communications to tampering alert criteria and may generate a tampering alert if the monitored communications meet at least a portion of the tampering alert criteria. The tampering alert may initiate interruption of at least the unexpected communication and performance of an action set to remediate an impact of the unexpected communication.

Abstract: Systems and methods provide synchronized collection of telemetry by an Information Handling System (IHS) operating in a zero-trust computing environment. Telemetry is identified that is ready for transmission by the IHS. A policy decision point of the zero-trust computing environment is notified of the identified telemetry that is ready for transmission by the IHS. The IHS receives a counter from the policy decision point for ordering the telemetry that is ready for transmission within the telemetry of the zero-trust computing environment. The telemetry is annotated with the counter that is received from the policy decision point. The transmitted telemetry may then be sequenced with all other telemetry generated in the zero-trust computing environment.

Abstract: Methods and systems for managing a data processing system are disclosed. A management controller of the data processing system may provide a sanitization request to a policy management server using an out-of-band communication channel. The management controller may obtain a response to the sanitization request from the policy management server via the out-of-band communication channel. The response may indicate whether performance of a sanitization process is authorized. The authorization may be based on a sanitization policy that governs sanitizations for the data processing system. If performance of the sanitization process is authorized, then the management controller may initiate and/or perform an action set based on the sanitization policy in order to complete the sanitization process, thereby placing the data processing system in a safe state.

Abstract: Systems and methods provide adaptive collection of telemetry. A telemetry orchestrator of a IHS (Information Handling System) collects telemetry related to a session used by the IHS to access a protected resource of a zero-trust environment, where the telemetry is collected based on a telemetry definition received from a policy decision point of the zero-trust environment. The telemetry orchestrator of the IHS monitors for updates to the telemetry definition, where the updates are generated by the policy decision point of the zero-trust environment. The telemetry orchestrator adjusts measurements by one or more of the sensors of the IHS based on updates to the telemetry definition received from the policy decision point. Telemetry that is generated based on the adjusted measurements is transmitted by the telemetry orchestrator to one or more destinations specified in the update telemetry definition.

Abstract: Systems and methods provided adaptive collection of telemetry. A policy decision point of a zero-trust computing environment receives an indication of a change in risk posture within the environment. The policy decision point identifies a telemetry definition specifying telemetry being collected by one or more IHSs that are currently accessing a protected resource of the zero-trust computing environment. The telemetry definition is updated to specify adjusted telemetry to be collected by an IHS that is currently accessing the protected resource and the updated telemetry definition is transmitted to the IHS. Based on the updated telemetry definition received from the policy decision point, the IHS adjust measurements by one or more of the sensors of the IHS. Telemetry generated based on the adjusted measurements is transmitted by the IHS to one or more destinations specified in the updated telemetry definition.

Abstract: Methods and systems for managing operation of data processing system are disclosed. To manage operation of the data processing system, a management controller of the data processing system may obtain and manage requests to perform management operation of data stored in a storage device hosted by the data processing system. The management controller may select a functionality of the storage device based at least on the request to invoke the functionality to obtain updated data stored in the storage device. By doing so, the likelihood of providing management operation services to manage data stored in a storage device of the data processing system may be increased without utilizing in-band components.

Abstract: Methods and systems for managing network communications of a data processing system are disclosed. The method may include identifying that a firewall hosted by hardware resources of the data processing system may be unavailable. When identified, a management controller may intercept network data directed to the hardware resources from remote entities. To do so, a network module of the data processing system may be utilized. The network data may be screened, by the management controller, based on a firewall policy hosted by the management controller to identify a privileged portion of the network data. The privileged portion of the network data may be redirected to the hardware resources for use in providing computer-implemented services.

Abstract: Methods and systems for managing operation of a data processing system are disclosed. To manage operation of the data processing system, policy management events may be identified by a management controller of the data processing system based on a set of control policies. Based on the identified policy management event, the management controller may identify a desired state for a discrete graphics component of the hardware resources of the data processing system and perform various action sets to update operation of the discrete graphics component to meet the desired state. By doing so, an updated graphics component may be obtained and used for providing computer implemented services as desired.

Abstract: Methods and systems for managing operation of a data processing system are disclosed. Hardware resources of the data processing system may use an existing secure communication modality when providing computer-implemented services. A management controller of the data processing system may identify that a secure communication modification event for the data processing system has occurred. Based on the identification, the management controller may perform a process to obtain an action for modifying the existing secure communication modality. The process may be based on a context of operation of the hardware resources and a schema that associates different contexts with different secure communication modalities. The action may be performed to obtain an updated secure communication modality. The hardware resources may use the updated secure communication modality to provide the computer-implemented services.

Abstract: Methods and systems for processing network communications for operation of a data processing system are disclosed. The method may include redirecting, via a network module hosted by the data processing system, the network communications received from a management system to a management controller hosted by the data processing system. The management controller may screen the network communications to identify an action set to be performed. The management controller may perform a command indicated by the network communications to place the hardware resources in an updated operating state, and/or direct the network communications to the hardware resources to be performed.

Abstract: Methods and systems for managing operation of a data processing system are disclosed. To manage operation of the data processing system, policies corresponding to different potential destinations of the data processing system may be implemented using out-of-band methods. By implementing applicable policies based on the potential destination locations, update data may be identified and operation of the data processing system may be updated based on the update data prior to the data processing system traveling to the potential destination. By updating operation of the data processing system prior to traveling to the potential destination location, computer implemented services that comply with geolocation based regulations and/or limitations specified by the applicable policies may be provided.

Abstract: Methods and systems for managing operation of a data processing system are disclosed. To manage operation of the data processing system, anomalous activity originating from hardware resources of the data processing system may be detected. Based on the detection, policies for managing the operation of the hardware resources may be identified by a management system and provided to a management controller of the data processing system for implementation. By doing so, the operation of the data processing system may be updated to decrease the ability of the hardware resources to operate in an undesired manner.

Abstract: Methods and systems for managing operation of a data processing system are disclosed. To manage operation of the data processing system, an occurrence of an emergency alert event may be identified by a management controller of the data processing system. Based on the identified emergency alert event, the management controller may initiate an emergency alert process and perform the emergency alert process in cooperation with a management system and emergency services system in order to update a state of the data processing system. By doing so, the likelihood of data processing system being able to communicate with remote entities that are required to cooperatively provide the computer implemented services may be increased.

Abstract: Methods and systems for managing operation of a data processing system are disclosed. To manage operation of the data processing system, software compliance events may be identified by a management controller of the data processing system. Based on the identified software compliance event, the management controller may generate a virtual entity that hosts natively hosted applications of the data processing system and utilize an observability entity to determine whether required applications are identified in the natively hosted applications. Based on the determination, the management controller may manage installation of any required applications not hosted by hardware resources of the data processing system.

Abstract: Methods and systems for managing operation of a data processing system are disclosed. To manage operation of the data processing system, software compliance events may be identified by a management controller of the data processing system. Based on the identified software compliance event, the management controller may generate a virtual entity that hosts natively hosted applications of the data processing system and utilize an observability entity to determine whether required applications are identified in the natively hosted applications. Based on the determination, the management controller may manage installation of any required applications not hosted by hardware resources of the data processing system.

Abstract: Methods and systems for managing operation of a data processing system are disclosed. To manage the data processing system, a management controller of the data processing system may establish, cooperatively with a storage device hosted by hardware resources of the data processing system, a secured management region of the storage device and security data for accessing data on the secured management region. The secured management region may be established based on a secured storage policy that may be obtained by the management controller from a management system via an out-of-band communication channel. The management controller may obtain data from the secured management region for use in updating operation of the data processing system.

Abstract: Methods and systems for managing operations of a data processing system are disclosed. To manage operations of the data processing system, data may be obtained to be provided to a remote entity. Using a classification schema, a classification may be obtained for the data. A transmission path for the data may be selected based on at least the classification and a rule set keyed to the classification. A channel between the data processing system and the remote entity may be identified for transmission of the data. In a first instance of the identifying in which the channel is an in-band communication channel, the data may be provided to the remote entity via the in-band communication channel. In a second instance of the identifying in which the channel is an out-of-band communication channel, the data may be provided to the remote entity via the out-of-band communication channel.

Abstract: An information handling system comprising a hardware processor to execute computer-readable program code instructions of a first unprivileged artificial intelligence (AI) productivity-tool software process for operations of an AI productivity tool software module to detect receipt of audio/video user query input data and generate a first encryption key for transmission to an audio/video encryption driver and a second unprivileged AI productivity-tool software process.