The Software Catalogue incl. Advisory Integrated module combines two things: the recognition database Deskcenter uses to identify your installed software unambiguously, and the Advisory reporting built on top of it. It is the same database that powers mosaic Advisory Connect.
What the software catalogue does
- Updated every day: an editorial team adds new products, editions and versions to the catalogue daily, and the live update service delivers them. You do not need your own recognition rules or fingerprints.
- Several recognition sources: file scan, registry and software ID tags (SWID), inventoried with or without an agent.
- Normalisation: consistent manufacturer and product names, detection of suites and bundles, classification as commercial or freeware.
- Categorisation: products grouped by area of use. You can see where several programs serve the same purpose and standardise your portfolio with the help of suggested alternatives.
- Risk rating: suspicious software such as games, downloaders, adware or file-sharing tools is flagged and can be removed through software rules.
- Lifecycle and patch level: release levels and end-of-life dates per product as well as the patch level of your installed versions, as a basis for software deployment and patch management.
Advisory Integrated included
Advisory Integrated is part of the module at no extra cost. It matches the recognised software products and versions against the National Vulnerability Database (NVD) and presents the results in 36 Power BI dashboards: known CVEs by severity, potentially affected devices and software products, lifecycle and data quality, including historical trends.
- Identify: match known CVEs to inventoried products and versions, based on the NVD.
- Assess: review CVSS base, exploitability and impact scores.
- Prioritise: highlight devices and software requiring attention.
- Report: use dashboards and historical trends to support documentation.
One database, two routes
The software catalogue is the same database that mosaic Advisory Connect uses. In the Deskcenter Management Suite you get it as a module including Advisory Integrated, with the Deskcenter inventory as the data source. If you use an inventory system from another vendor, mosaic Advisory Connect enriches its data with the same catalogue.
Remediation through the Deskcenter Management Suite
The software catalogue and Advisory Integrated identify and assess. Remediation takes place separately through software deployment and patch management in the Deskcenter Management Suite, not through a patch button in Advisory. Which steps you can take there depends on the licensed modules of the suite.
Good to know
Advisory is not an active network or application scanner; matching is based on inventory data. The reports can support risk management and documentation in connection with NIS2, KRITIS, DORA and ISO/IEC 27001, but do not replace an ISMS or other required security measures.