Tracking malicious software movement with an event graph | Patent Application Number 18084825 | Patexia