>And are you planning to add detection for binaries that live outside of the distro package manager?
It's on the roadmap! Others have mentioned that before. First we need to get really good at knowing about CVEs :).
It's on the roadmap! Others have mentioned that before. First we need to get really good at knowing about CVEs :).
Unfortunately it's not easy -- even writing scripts to detect running processes across all our servers to identify Java, Apache, Tomcat, etc etc has proven difficult to get right. Sometimes you can get enough info from extended process list info, sometimes not.
Sucks.