Patent ID: 11930031
Assignee: TENABLE, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 27:
28. An endpoint device configured to passively scan a network, comprising:
a memory; and
at least one processor coupled to the memory,
wherein when an endpoint passive scanner is deployed on the endpoint device, the at least one processor and the memory are configured to:
sniff network traffic traveling to and/or from the endpoint device, the network traffic comprising a plurality of packets; and
detect information that facilitates discovery of one or more assets of the network and/or identification of one or more vulnerabilities in one or more network entities and/or one or more services based on the sniffed network traffic, and

wherein when an endpoint agent is deployed on the endpoint device, the at least one processor and the memory are configured to:
perform a vulnerability scan of the endpoint device,

wherein the endpoint passive scanner is deployed as a passive scan library linked to the endpoint agent running on the endpoint device, and
wherein the endpoint passive scanner is configured to run when the endpoint agent calls the passive scan library.