Extra-component analysis is used when the vulnerability is suspected to
lie either in the execution environment or in the dynamics of the whole system’s
behavior not traceable to a single component or interface. The analysis includes
reviewing audit and event logs to find indications of security-relevant wholesystem behaviors that indicate vulnerabilities caused by configuration problems