Configuration drift.

Yeah, the configuration drift.

Somebody walks up to a server, makes a change.

Well, if that's under configuration, I don't want that change.

I want it reverted back to what I defined it as.

That's wonderful, but that doesn't apply to everything.

Maybe you want that on an app, maybe you want that capability on a service, maybe you don't.

these tools are amazing at finding vulnerabilities you couldn't have even conceived of.