Abstract: Disclosed are methods and systems for improving security via a trusted advisor. The disclosed embodiments recognize that some computer users may benefit from oversight by another individual, who may have more computer expertise and be better equipped to evaluate whether security implicating changes to a computer are appropriate. To that end, the disclosed embodiments provide for a notification to a trusted advisor in the event that particular events on the computer meet a criterion. For example, an attempt to launch or install a program having particular characteristics may benefit from a review by a trusted advisor.

Abstract: In some embodiments, a local agent on a target system may evaluate current and/or historical system state information from a store (either local or remote) and dynamically adjust the level of diagnosis performed during the scan based on the evaluated state information. Individual diagnostic scans may, for example, be enabled and disabled based on the context in the store, and each scan may update the context for further evaluation. By employing such an approach, systems with a low risk profile and lacking symptoms of a problem may be scanned quickly while systems that show signs of a problem or have a high risk profile may receive a more thorough evaluation.

Abstract: In some embodiments, a local agent on a target system may evaluate current and/or historical system state information from a store (either local or remote) and dynamically adjust the level of diagnosis performed during the scan based on the evaluated state information. Individual diagnostic scans may, for example, be enabled and disabled based on the context in the store, and each scan may update the context for further evaluation. By employing such an approach, systems with a low risk profile and lacking symptoms of a problem may be scanned quickly while systems that show signs of a problem or have a high risk profile may receive a more thorough evaluation.