#sbom

Field Note · May 15, 2026 · The Field Notes Desk

A defensible software inventory you can build with the tools you already have

PowerShell, dpkg, system_profiler, Nmap, and a git repo will produce a weekly software inventory that joins cleanly against the CISA KEV catalog. Here are the parts that look right and aren't.