Network Detective gathers information regarding endpoint security (anti-virus, anti-spyware, and local backup) from Microsoft Security Center; however, some vendors and some anti-virus/anti-spyware versions do not properly publish to Security Center. In some cases, such as on server operating systems, security center is not available. WMI is also used to interact with Security Center and that is sometimes not available.
To augment detection, a secondary detection methodology using Windows Services is used.
