Systems and methods for locating application-specific data on a remote endpoint computer

1. A system for locating application-specific data, comprising:

a server for defining a command by an operator;

an agent operating on an end-point system for conducting an application-specific data search on the end-point system, the search defined by the command; and,

a broker for receiving the command from the server and relaying the command to the agent;

wherein:

the agent produces a real-time search result from the search;

the agent sends the search result to the broker when the agent has a viable communications channel with the broker;

the end-point system comprises a data storage device; and

the agent stores the search result in a data store of the data storage device when the communications channel with the broker is not currently viable.

2. The system of claim 1 , wherein the data store is an encrypted data store.

3. A system for locating application-specific data, comprising:

a server for defining a command by an operator;

an agent operating on an end-point system for conducting an application-specific data search on the end-point system, the search defined by the command; and,

a broker for receiving the command from the server and relaying the command to the agent;

wherein:

the server sends a command using an outbound port that is set to be active; and

an inbound port corresponding to the outbound port is set to be inactive.

4. A method for locating application-specific data, comprising:

(a) receiving a command from a remote computer system;

(b) conducting an application-specific data search on a local computer system pursuant to the command;

(c) processing a search result of the application-specific data search on the local computer system;

(d) verifying that a current connection exists between the local computer system and the remote computer system;

(e) if the current connection exists, then sending the processed search results from the local computer system to the remote computer system; and

(f) if the current connection does not exist, then storing the search results on a computer-readable medium of the local computer system.

5. The method of claim 4 , wherein, if the connection does not exist, then storing the search results in an encrypted data store on the computer-readable medium.

6. The method of claim 5 , further comprising suspending the application-specific data search when the data store size reaches a first pre-determined size limit.

7. The method of claim 6 , further comprising sending the processed search results from the local computer system to the remote computer system and removing corresponding search results from the data store.

8. The method of claim 7 , further comprising resuming the application-specific data search when the data store size decreases below a second pre-determined size limit.

9. A non-transitory computer-readable medium comprising instructions executable by a computer processor, the instructions comprising:

conducting an application-specific data search;

processing a search result of the application-specific data search;

verifying that a current connection exists with a remote computer system; and,

if the current connection exists, then sending the processed search results to the remote computer system; and,

if the current connection does not exist, then storing the search results in a data store in the computer-readable medium.

10. The non-transitory computer-readable medium of claim 9 , wherein the data store is an encrypted data store.

11. The non-transitory computer-readable medium of claim 9 , wherein the instructions further comprise suspending the application-specific data search when the data store reaches a pre-determined size limit.

12. The non-transitory computer-readable medium of claim 9 , wherein the instructions further comprise removing the processed search results from the computer-readable medium after the processed search results have been sent to the remote computer.