osquery vulnerability management

[ben-sec]

Hi!

I run SO 2.3.190 and I thought I give the vulnerability management features of osquery and Fleet a chance. The Linux hosts of my distributed SO environment are full of (old) vulnerabilities (even though I run OS updates regularly) and for my test Windows clients I don't get any vulnerabilities and it does not find all of my siftware (e.g. MS Office products are missing (no, I did not set the disable​_win​_os​_vulnerabilities option in the Fleet config). Any idea what I'm doing wrong? How reliable are these features of osquery and Fleet? Any experiences out there? Thanks in advance!

Cheers, Ben

[defensivedepth]

We still disable this by default for that reason - see here: #7643 (comment)