The safeguards map / 4.1 Detection and intake
Keylime
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A remote attestation system that uses TPM hardware to verify the boot state and runtime integrity of remote machines.
Where it sits
4.1 Detection and intake (primary): Runs a verifier that continuously checks the integrity state of remote machines against a hardware root of trust, so a machine that departs from its expected state becomes known.
The Verifier continuously verifies the integrity state of the machine that the agent is running on.
captured
Keylime enables users to monitor remote nodes using a hardware based cryptographic root of trust.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who run it
- Runs
- at runtime
Handoffs
None recorded. A mapped entry with no handoff is here for its foundation home.
Collector's note
A weak fit for 4.1: the sources read describe attestation and integrity monitoring and do not say what happens on a failed check. The Python agent in the repository is deprecated in favor of the Rust agent.
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.