Scanned data types

[Joe_Powell]

Is anyone able to point me in the direction of a document or link that details the asset data retrieved from from each of the different types of scanning methods.

i.e.

Agentless Windows OS = CPU, Memory ,Disk etc.

Agentless Linux OS = CPU, Memory ,Disk etc.

Agent based = CPU, Memory ,Disk, other data not presented by WMI

Agent Linux OS = CPU, Memory ,Disk, RPM library

Infosec are interested in knowing the datasets retrieved to make a determination on how the data gathered should be classified.

[DavidPK]

Hi Joe,

The following KB article link below has many sub articles there that describe or scanning targets and methods used along with ports. 

https://community.lansweeper.com/t5/scanning-your-network/tkb-p/kb_scanning-your-network

[Joe_Powell]

I've looked over the KB article and the sub articles and none really mention what data is collected by each method.

It is this information that is key to understand how to classify each data gathering method.

e.g. if WMI brings back PII information then it will need vetting on what PII information it retrieves, if it doesn't return any PII info then it can be used in more open circumstances.