Operating System Resources

AI Model Cache

AIDE file integrity database

Antigravity (Google) instance

Apache2 HTTP Server

Apache2 HTTP Server configuration

AppArmor mandatory access control

Advanced Package Tool (APT) configuration

Operating system end-of-life status

auditd (Linux Audit Daemon) global configuration

auditd (Linux Audit Daemon) ruleset on disk

Windows audit policies

Windows audit policy entry

Augment Code instance

SSH authorized_keys file

SSH authorized key

BIND 9 DNS Server

Apache Cassandra Server

Apache Cassandra cassandra.yaml file

Apache Cassandra cassandra-env.sh file

Apache Cassandra cassandra-rackdc.properties file

Linux control groups (cgroup v2)

Chocolatey package inventory (Windows)

Chromium-family browsers (Chrome, Brave, Edge variants)

Chrony NTP daemon configuration

Claude Code (Anthropic CLI agent) instance

Cline AI agent instance

Cloud-asset metadata

Result of running a shell command on the system

Conda package inventory

OCI/Docker container image reference

Container registry repository

containerd host

Single containerd container

Continue (open-source AI coding assistant) instance

Crontab schedule on the system

Cursor editor (AI-powered) instance

Dart/Flutter package dependency

Dart/Flutter package inventory

Docker host

Single Docker container on the host

Dockerfile parser

Single Docker image on the host

.NET / NuGet package dependency

.NET / NuGet package inventory

Elixir Hex package dependency

Elixir Hex package inventory (mix.lock)

Erlang Hex package dependency

Erlang Hex package inventory (rebar.lock)

Exim mail transfer agent configuration

File on the system

File search and discovery namespace

File search results

Firefox-family browsers

Firefox enterprise policy configuration

firewalld dynamic firewall manager (RHEL/CentOS/Fedora)

fstab persistent mount table

Gemini CLI (Google) instance

GitHub Copilot CLI instance

GitHub Actions action reference

GitHub Actions workflow dependencies

Go module dependency

Go module inventory

Goose AI agent (Block) instance

Group on the system

All groups configured on the system

GRUB bootloader configuration

HAProxy load balancer

HAProxy configuration

Haskell package dependency

Haskell package inventory (Stack and Cabal)

Homebrew package inventory (macOS and Linux)

IBM Bob instance

inetd super-server namespace

inetd super-server configuration

IPv6 packet filter (ip6tables)

IP address (v4 or v6) with networking details

IPv4 packet filter (iptables)

Individual iptables rule entry

Java keystore or trust store

Java package (Maven, Gradle, or JAR archive)

Java package inventory (Maven, Gradle, JAR archives)

Trust stores of every JVM installed on the asset

JBoss EAP / WildFly application server

Jenkins plugin inventory

systemd journald configuration

journald configuration section

journald configuration parameter

Julia package inventory

Junie (JetBrains AI agent) instance

Running kernel and its modules

System kernel module information

Kilo Code AI agent instance

Kiro CLI (AWS) instance

Kubernetes kubelet on this node

macOS launchd job configurations

PAM resource limits configuration (limits.conf)

Shadow password suite (login.defs) configuration

logrotate configuration

Unix block devices (lsblk)

Unix block device

Lua/LuaRocks package inventory

LUKS-encrypted volumes on the host

LUKS keyslot

LUKS-encrypted block device

Linux Logical Volume Manager

Hardware identity from SMBIOS / DMI

SMBIOS baseboard (or module) information

SMBIOS BIOS information

SMBIOS system enclosure or chassis

CPU information

Secure Boot status

SMBIOS system information

macOS-specific operating system surfaces

macOS application layer firewall (raw ALF preference values)

macOS FileVault full-disk encryption

macOS application layer firewall

macOS Gatekeeper application execution policy

macOS hardware overview

macOS MDM (Mobile Device Management) enrollment state

macOS configuration profiles installed on the system

macOS Sharing service state

macOS System Integrity Protection (SIP)

macOS Software Update configuration and pending updates

macOS machine settings via the systemsetup CLI

macOS Time Machine backup configuration

macOS XProtect anti-malware bundle

MariaDB Server

MariaDB option files

Linux software RAID arrays (mdadm)

Mistral Vibe (Mistral AI) instance

Kernel module configuration (modprobe.d)

MongoDB Server

MongoDB configuration file

Unix mount table

Unix mount point

MySQL Server

MySQL option files

Network configuration of this system

NFS service local state

nftables firewall

Nginx HTTP Server

Nginx HTTP Server configuration

npm package dependency

npm package inventory

NTP daemon configuration

Ollama server configuration on the host

opam package inventory

OpenAI Codex CLI instance

OpenBSM audit_control configuration (macOS and BSD)

OpenClaw AI agent instance

OpenCode AI coding assistant instance

OpenHands AI agent instance (formerly OpenDevin)

Operating system information

Generic operating system information common to all platforms

Operating system date and timezone information

Operating system information for Linux platforms

Operating system root certificate trust store

Operating system information for Unix-like platforms

Operating system update information

Open vSwitch

Installed package on the platform or OS

All packages installed on the system

PAM (pluggable authentication module) configuration

Parse X.509 certificates from files

Parse INI configuration files

Parse JSON files

Parse OpenPGP keys from files

Parse Apple property list (plist) files

Parse XML files

Parse YAML files

PHP / Composer package dependency

PHP / Composer package inventory

Pi AI agent instance

FreeBSD pkg configuration

Platform and package advisories

Platform and package CVEs

Podman container engine

Podman container

Podman image

Podman network

Podman pod

Podman volume

Polkit authorization framework

Single TCP/UDP port on the system

All TCP/UDP ports on the system

Postfix mail transfer agent configuration

PostgreSQL postgresql.conf file

PostgreSQL pg_hba.conf file

PostgreSQL pg_ident.conf file

Result of running a PowerShell script on the system

Private key on disk

Single process on the system

All processes running on the system

SWI-Prolog pack

SWI-Prolog pack inventory

Python package inventory

Python package information

Qwen Code (Alibaba) instance

R package inventory

Windows registry key

Windows registry key property

Roo Code editor instance

rsyslog daemon configuration

Ruby gem package

Ruby gem inventory

Rust/Cargo crate dependency

Rust/Cargo crate inventory

Safari browser (macOS only)

Windows local security policy

SELinux mandatory access control

Service on the system

All services configured on the system

Shadow password file (/etc/shadow)

Shadowed password file entry

Net-SNMP daemon (snmpd) namespace

Net-SNMP daemon (snmpd) configuration

Snowflake Cortex Code instance

Squid caching proxy

Squid caching proxy configuration

SR-IOV network devices

OpenSSH server (sshd) namespace

OpenSSH server (sshd) configuration

Sudo binary and runtime metadata

sudo authorization configuration

Swift package dependency

Swift package inventory (SPM and CocoaPods)

FreeBSD rc.conf system configuration

systemd-resolved DNS resolver state

systemd socket unit

All systemd socket units on the system

All systemd target units on the system

systemd timer unit

All systemd timer units on the system

systemd-timesyncd NTP client state

systemd unit execution and sandboxing settings

All systemd service units on the system

Terraform provider dependency

Terraform provider inventory (SBOM cataloger)

Apache Tomcat

Trae AI assistant (ByteDance) instance

UFW (Uncomplicated Firewall) state and rules

USB device inventory (experimental)

User account on the system

All user accounts configured on the system

vcpkg package inventory

Visual Studio Code (and forks)

Asset vulnerability assessment

Warp AI terminal instance

Windows-specific operating system surfaces

Windows advanced audit policy

Windows audit policy subcategory

Windows BitLocker drive encryption

Windows BitLocker Group Policy (FVE) settings

Windows BitLocker volume

Microsoft Defender Antivirus

Microsoft Defender Attack Surface Reduction rule

Microsoft Defender behavioral network block settings

Microsoft Defender cloud-delivered protection settings

Microsoft Defender controlled folder access settings

Microsoft Defender scan exclusions

Microsoft Defender local setting overrides

Microsoft Defender network protection settings

Microsoft Defender Antivirus preferences

Microsoft Defender real-time protection settings

Microsoft Defender remediation settings

Microsoft Defender scan settings

Microsoft Defender signature and platform update settings

Microsoft Defender Antivirus runtime status

Microsoft Defender recorded threat

Microsoft Defender default threat actions

Microsoft Defender threat detection

Microsoft Defender per-threat-ID action override

Windows Event Log channel configuration

Windows Exploit Protection

Windows Firewall (Advanced Security)

Windows Firewall profile entry

Windows Firewall rule entry

Windows hotfix

Windows Local Security Authority (LSA) security policy

Windows PowerShell logging policy

Installed Windows print driver

Print drivers registered with the Windows spooler

Windows Remote Desktop / Terminal Services configuration

Windows Schannel TLS configuration

Windows registered security products

Windows Security Center health

Microsoft Defender SmartScreen

Windows SMB (Server Message Block) server

Windows Print Spooler security configuration

Windows diagnostic data (telemetry) and consumer cloud-content policy

Windows Trusted Platform Module (TPM)

Windows Update Agent

Windows Remote Management (WinRM)

Windsurf editor (Codeium) instance

WordPress plugin inventory

Yum/DNF package manager

Yum/DNF global configuration

Yum repository

Zed editor instance

ZFS storage pools and datasets

ZFS dataset (filesystem, volume, snapshot, or bookmark)

ZFS storage pool

ZFS virtual device (vdev) in a pool's topology