Capabilities
- Kernel Vulnerability Detection: Flags dirty COW, PwnKit, and unpatched kernel CVEs.
- Package Manager Inspection: Ingests package manifests via SSH/WinRM (APT, RPM, Zypper, Pacman, Windows Update).
- Privilege Misconfigurations: Insecure sudoers configurations, world-writable sensitive files (
/etc/passwd), and weak service permissions.