Cynet searches for vulnerabilities regarding the operating system and application installed on the endpoint. Under Settings > IT Hygiene, you can configure the following functions: Windows Patch ValidationUnauthorized ApplicationsApplication Patch ValidationAgent ValidationThe default scan interval is 1440 minutes (24 hours). You can view Vulnerability Assessment results in several places in the console. See details below.Windows Patch ValidationThe Cynet agent queries the Windows Update subsystem on the endpoint and maps all the available Knowledge Bases (KBs) that are ready to be installed. You can whitelist Windows KB updates, which are known to be missing or uninstalled. To whitelist Windows KBs, type the name of the KB. Each KB displays in a new line.Unauthorized ApplicationsThe Cynet agent compares the list of programs on the endpoint to the list of applications that are unauthorized to run on the endpoint, and reports if any unauthorized application is installed at the endpoint.You can add or remove applications from the Unauthorized Applications list. The list includes applications that Cynet has classified as potentially restricted.To add an application to the Unauthorized Applications list, add the name of the application in a new line. Enter the name of the application exactly as it is displayed in Add/Remove Programs in Windows.Application Patch ValidationThe Cynet agent verifies that the latest patched version of the specified application is installed on the endpoint.For example, if the organization’s security team defines that an Internet Explorer version below 11 is considered vulnerable, Cynet scans all the endpoints in the organization and reports of all the endpoints containing an Internet Explorer version below version 11.You can add or remove applications that must be installed with a minimum version. Enter the name of the application exactly as it is displayed in Add/Remove Programs in Windows.Agent ValidationYou can insert a list of third-party applications and processes, which are defined as crucial applications on the endpoint. The Cynet scanner queries the Windows task manager and Add/Remove programs to verify that the third-party application is installed and running.Cynet scans all the endpoints in the organization to check for: Applications installed but not running.Applications not installed and not running.You can add or remove applications from the important third-party applications list. When adding applications to the list: Enter the name of the application as it is displayed in Windows Add/Remove Programs.Enter the process of the application displayed in Windows Task Manager.Viewing IT Hygiene DataThere are several ways in which you can view Vulnerability Assessment results:Generate a IT hygiene report via the Reports sectionView vulnerabilities per host via the Forensic section. The Vulnerability Assessment tab appears only if there is relevant data to display.Add IT hygiene information to the Hosts Forensic display via the Advanced Search:VA InformationAvailable FieldsWindows Patch ValidationMissing Windows Patch NameUnauthorized ApplicationsRisky App NameRisky App StatusApplication Patch ValidationOutdated App NameOutdated App StatusOutdated App VersionAgents ValidationAgent Validation Status