Sakis uses a tool that scans a system for available services and then connects to them to collect banner information to determine what version of the service is running. It then provides a report detailing what it gathers, basing results on service fingerprinting, banner information, and similar details it gathers combined with CVE information. What type of tool is Sakis using?

Vulnerability scanners that do not have administrative rights to access a machine or that are not using an agent to scan remote machines gather information including fingerprints from responses to queries and connections, banner information from services, and related data. CVE information is Common Vulnerability and Exposure information. A port scanner gathers information about what service ports are open, patch management tools typically run as an agent on a system to allow them to both monitor patch levels and update the system as needed, and service validation typically involves testing the functionality of a service, not its banner and response patterns.