operating system and software applications and their configuration
settings, including registry key settings, file system attributes,
configuration files
u Inspection and checking for specific OVAL-defined vulnerabilities,