Patent attributes
A computer system is monitored via malware detection modules deployed throughout input/output layers of the computer system. Each malware detection module is configured to detect activity associated with malware present in the computer system. Upon detection of malware activity in one or more input/output layers of the computer system, one or more of the malware detection modules generate and send respective messages reporting the detected activity to a central malware alert engine. The one or more messages are received at the central malware alert engine from the one or more malware detection modules. In response to the one or more received messages, the central malware alert engine alerts one or more portions of a data protection system of the computer system to enable the data protection system to take one or more remedial actions to protect the computer system from the malware present in the computer system.