Discovery
Service discovery depends on the authorized agent and configured templates. Manual checks remain bounded and record their result.
Templates
Use the service template that matches the operating system and application. Inspect the generated evidence when a service is marked attention.