System and method for agentless application inventory detection

1. A method for agentless generation of a software bill of materials (SBOM) in a computing environment, comprising:

generating an inspectable disk based on a disk deployed in a computing environment;

inspecting the inspectable disk for a software component;

detecting the software component in the inspectable disk;

generating an SBOM based on the detected software component; and

storing the SBOM in a database.

2. The method of claim 1 , further comprising:

detecting a cloud service in the computing environment, wherein the computing environment is a cloud computing environment; and

storing an identifier of the cloud service in the SBOM.

3. The method of claim 1 , further comprising:

detecting a workload associated with the disk in the computing environment.

4. The method of claim 1 , further comprising:

generating the inspectable disk by cloning the disk deployed in the computing environment.

5. The method of claim 1 , further comprising:

generating the inspectable disk based on a snapshot of the disk.

6. The method of claim 1 , further comprising:

generating the inspectable disk based on a copy of the disk.

7. The method of claim 1 , wherein the software component is any one of: a software application, a library, a binary, a dependency, a version setting, a registry file, a license, a vendor identifier, and any combination thereof.

8. The method of claim 1 , further comprising:

generating a first SBOM at a first time; and

generating a second SBOM at a second time.

9. The method of claim 8 , further comprising:

detecting a difference between the second SBOM and the first SBOM; and

storing the first SBOM and the detected difference in the database.

10. The method of claim 9 , further comprising:

initiating a mitigation action in response to detecting the difference.

11. The method of claim 8 , further comprising:

deleting the first SBOM from the database; and

storing the second SBOM in place of the first SBOM in the database.

12. The method of claim 1 , further comprising:

receiving an identifier of a software component;

generating a query based on the received identifier; and

executing the generated query on the database.

13. A non-transitory computer-readable medium storing a set of instructions for agentless generation of a software bill of materials (SBOM) in a computing environment, the set of instructions comprising:

one or more instructions that, when executed by one or more processors of a device, cause the device to:

generate an inspectable disk based on a disk deployed in a computing environment;

inspect the inspectable disk for a software component;

detect the software component in the inspectable disk;

generate an SBOM based on the detected software component; and

store the SBOM in a database.

14. A system for agentless generation of a software bill of materials (SBOM) in a computing environment comprising:

a processing circuitry;

a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:

generate an inspectable disk based on a disk deployed in a computing environment;

inspect the inspectable disk for a software component;

detect the software component in the inspectable disk;

generate an SBOM based on the detected software component; and

store the SBOM in a database.

15. The system of claim 14 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

detect a cloud service in the computing environment, wherein the computing environment is a cloud computing environment; and

store an identifier of the cloud service in the SBOM.

16. The system of claim 14 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

detect a workload associated with the disk in the computing environment.

17. The system of claim 14 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

generate the inspectable disk by cloning the disk deployed in the computing environment.

18. The system of claim 14 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

generate the inspectable disk based on a snapshot of the disk.

19. The system of claim 14 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

generate the inspectable disk based on a copy of the disk.

20. The system of claim 14 , wherein the software component is any one of:

a software application, a library, a binary, a dependency, a version setting, a registry file, a license, a vendor identifier, and any combination thereof.

21. The system of claim 14 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

generate a first SBOM at a first time; and

generate a second SBOM at a second time.

22. The system of claim 21 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

detect a difference between the second SBOM and the first SBOM; and

store the first SBOM and the detected difference in the database.

23. The system of claim 22 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

initiate a mitigation action in response to detecting the difference.

24. The system of claim 21 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

delete the first SBOM from the database; and

store the second SBOM in place of the first SBOM in the database.

25. The system of claim 14 , wherein the memory contains further instructions which when executed by the processing circuitry further configure the system to:

receive an identifier of a software component;

generate a query based on the received identifier; and

execute the generated query on the database.