Input Data

Application Signatures uses the following input data:

  • Processes running on the host, including"

    • name

    • PID

    • command line, executable path, arguments

    • owner

  • Ports of processes (optional)

    • regular open ports and listening ports

    • which interfaces the ports are open on

  • Installed Software (optional)

  • Services (optional)

Processes and ports information is used in identification of applications. Information about services and installed software is not used in identification, but allows the building of relationships to corresponding topologies.