2. How Does VulnDetect Work - VulnDetect Technical Guide

2. How Does VulnDetect Work - VulnDetect Technical Guide

How Vulndetect Scans 

SecTeer VulnDetect scans the host to collect metadata from EXE, DLL, and OCX files on the system. The scan works by examining the actual files on the host, and the result is highly reliable as a product cannot be present on a system without the actual files required being present. The metadata of program files, including but not limited to, size, version information, date, hashes, digitalsignatures, and other header/meta information is sent to SecTeer‘s Secure Data Processing Cloud where it is processed and parsed. For further information about our data collection policy, visit: 
https://secteer.com/privacy-policy-for-secteer-vulndetect/

The data is matched against SecTeer‘s File Signatures, which are rules that match the raw metadata to the product installation. A part of this matching process also results in an accurate version extraction from the metadata.
After the initial parsing, SecTeer VulnDetect knows precisely which products (applications) are installed on the host with the exact version details, resulting in an accurate inventory of the installed software that has been detected on the system.
The inventory of the detected software is matched against SecTeer‘s vulnerability and patch management database, which contains the most accurate and current signatures.  

The result is an accurate inventory of products, their versions, and the security state of each application:  
Ok(Patched), 
Insecure (Unpatched), 
End-of-Life, or 0-Day.

The security Patch Management Process 

Do i need this section? Seb told me he never saw this picture before: