Beyond blocking unauthorised execution, the organisation puts the technology's secondary capabilities to work: maintaining an inventory of applications and versions on each host to find unlicensed, prohibited or wrong-version software; monitoring or preventing changes to application files; and, during an incident, capturing the hashes of malicious files on one host and checking all other hosts for them. Where present, portable storage control, memory protection, reputation services and anti-malware integration are considered too.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.