[phillmv]

>And are you planning to add detection for binaries that live outside of the distro package manager?

It's on the roadmap! Others have mentioned that before. First we need to get really good at knowing about CVEs :).

[feld]

If you can solve this people will throw boatloads of money at you.

Unfortunately it's not easy -- even writing scripts to detect running processes across all our servers to identify Java, Apache, Tomcat, etc etc has proven difficult to get right. Sometimes you can get enough info from extended process list info, sometimes not.

Sucks.