SysAuditor

The SysAuditor is an operational set of tools designed to standardize the capture and utilization of metadata related to systems, processes, and operations to build a comprehensive picture of IT organizations, applications, networks, and system environments.

SysAuditor Framework

SysAuditor framework builds on the SPDX standard to optimize the power of the graph language and ontology by combining all profiles into one graph (or inventory). This inventory includes the extraction or reading of live hardware to ensure system audits are accurate.

Real-time auditing of hardware provides accurate information related to including containers and virtual machines.

SysAuditor Tool Set

SysAuditor includes tools to:

Data Capture Tool - This tool reads, captures, and stores metadata on a computer related to hardware and software in near real time using the SPDX V3.1 standard. A comprehensive inventory of all components, including virtual machines, is required for compliance with purchase, operations, and insurance regulatory requirements.
Change Monitoring Tool - Changes between different “Data Capture” versions are identified using the Change Monitoring Tool. It is essential to determine if system changes have been implemented and not documented.
Amalgamation Tool - Inventories from different systems can be amalgamated into a master inventory for better searching, traceability, and management. A central inventory reduces the time and errors associated with searching for components across many systems.
Analysis Tool - Analysing the significant amount of metadata collected is important. Specific analysis needs will be determined with the support of specialized tools.
Visualization Tool - Most systems have hundreds to thousands of nodes. The visualization tool helps users understand the relationship between components by visually presenting information. Different views and presentations help identify Licenses, certificates, hardware, software, virtual machines, etc.
Augmentation Tool - Information augmentation helps system operators document and share information related to risk management and operations. Defining processes for enhancements, updates, and related processes is all part of enrichment. The visualization tool can be used for augmentation or enrichment.
Import and Export Tool - SPDX documents can be imported and exported for a variety of reasons.
Supply Chain Creation Tool - Creating a supply chain for internal and external sharing is easy with this tool. Designing, changing, and expanding the supply chain visually is a practical, easy way to manage it. Adding supply chain information to hardware is an example of the power of this creation tool.

Page updated

Report abuse