Summary: The system Center software inventory agent can collect scan results, which can be imported to Software Vulnerability Manager to be evaluated for Vulnerabilities as explained below:
System Center Inventory Import
We do advise following the above prerequisites, adding permissions to the SCCM Database, usually named 'CM_<site_code>' for the Daemon user, however security teams may request a list of tables accessed during this process.
Answer: Below for further information are the SCCM tables & views queried during the System Center Inventory Import:
SoftwareInventory
v_Add_Remove_Programs
dbo.v_R_System
v_GS_OPERATING_SYSTEM
v_R_System
v_GS_LastSoftwareScan
v_GS_LastSoftwareScan
vCollections
v_GS_WORKSTATION_STATUS
v_r_system
v_Update_ComplianceStatusAll
v_UpdateInfo
Learn more:
https://docs.flexera.com/csi/Content/helplibrary/System_Center_Inventory_Import.htm
https://docs.flexera.com/csi/Content/helplibrary/System_Center_Import_Schedules__Requires_the_Software_Vulnerability_Manager.htm
