How Vulndetect Scans
SecTeer VulnDetect scans the host to collect metadata from EXE, DLL, and OCX files on the
system. The scan works by examining the actual files on the host, and the result is highly reliable
as a product cannot be present on a system without the actual files required being present.
The metadata of program files, including but not limited to, size, version information, date, hashes,
digitalsignatures, and other header/meta information is sent to SecTeer‘s Secure Data Processing
Cloud where it is processed and parsed.
For further information about our data collection policy, visit:
The data is matched against SecTeer‘s File Signatures, which are rules that match the raw
metadata to the product installation. A part of this matching process also results in an accurate
version extraction from the metadata.
After the initial parsing, SecTeer VulnDetect knows precisely which products (applications) are
installed on the host with the exact version details, resulting in an accurate inventory of the
installed software that has been detected on the system.
The inventory of the detected software is matched against SecTeer‘s vulnerability and patch
management database, which contains the most accurate and current signatures.
The result is an accurate inventory of products, their versions, and the security state of each application:
Ok(Patched),
Insecure (Unpatched),
End-of-Life, or 0-Day.
The security Patch Management Process
Do i need this section? Seb told me he never saw this picture before: