Linux
Windows
Root required
| Name | Summary | Dependencies | Status |
|---|---|---|---|
| appuser | AppUserModule fills user information from the PID of an application | netstat | |
| arp | ARPModule reads internal ARP table to find network neighbors. | ping | |
| chassis | ChassisModule fills host chassis information | host-basic | |
| docker | DockerModule retrieves information about docker containers. | host-network, tcp-scan | |
| dpkg | DPKGModule reads package information from the dpkg package manager. | host-basic, netstat | |
| host-basic | HostBasicModule retrieves basic information about the host: hostid, architecture, platform, distribution, version and uptime | |
|
| host-cpu | HostCPUModule retrieves host CPU info: model, vendor and the number of cores. | host-basic | |
| host-disk | HostDiskModule retrieves basic information about disk: name, model, size, type, controller and partitions. | host-basic | |
| host-gpu | HostGPUModule retrieves basic information about GPU: index, vendor and product name. | host-basic | |
| host-network | HostNetworkModule retrieves basic newtork information about the host: interfaces along with their mac, ip and mask (IPv4 and IPv6) | host-basic | |
| ja4 | JA4Module attempts JA4, JA4S and JA4X fingerprinting | tls | |
| msi | MSIModule creates models.Packages instance from the windows registry | host-basic | |
| netstat | NetstatModule aims to retrieve infos like the netstat command does It must be run as root to retrieve PID/process information. | host-basic, host-network | |
| ping | PingModule pings local networks to discover new hosts. | host-network | |
| reverse-lookup | ReverseLookupModule tries to get a hostname attached to a local IP address | netstat | |
| rpm | RPMModule reads package information from the rpm package manager. | host-basic, netstat | |
| snmp | SNMPModule Module to collect data through SNMP protocol. | arp | |
| ssh | SSHModule aims to retrieve info from remote ssh services. | tcp-scan | |
| tcp-scan | TCPScanModule tries to connect to neighbor TCP ports. | arp | |
| tls | TLSModule enrich endpoints with TLS information. | tcp-scan, netstat | |
| vmware | VMwareModule tries to connect to esxi/vcenter hosts and list VMs | tls | |
| zypper | ZypperModule reads package information from the zypper package manager. | host-basic, netstat | |