Cybersecurity scanning techniques

A non-transitory computer-readable medium having stored thereon instructions for causing a processing circuitry to execute a process, the process comprising:

• identifying an entity in a computing environment based on a scan of the computing environment, wherein the entity is defined with respect to a relationship between the entity and a storage volume in the computing environment;
• restoring a snapshot of the entity to a running volume by creating a volume based on the snapshot;
• analyzing data of the running volume in order to identify at least one database;
• and running each of the identified at least one database, wherein running each database further comprises mapping the database to at least one engine based on at least one file of the running volume, wherein the database is run based on the at least one engine to which the database is mapped, wherein running each database further comprises:
• determining at least one configuration for the database based on the at least one engine to which the database is mapped, wherein the at least one configuration has a plurality of configuration parameters, wherein the database is run based on the at least one configuration determined for the database;
• determining a minimal configuration for the database based on the plurality of configuration parameters of the at least one configuration determined for the database, wherein the minimal configuration is at least one minimal configuration parameter selected from among the plurality of configuration parameters, wherein the database is run using the minimal configuration determined for the database, wherein the at least one minimal configuration parameter includes a primary file;
• running the database during a first run using a first file as the primary file;
• determining that the first file is not the primary file;
• and
• modifying the at least one minimal configuration parameter to include a second file as the primary file when it is determined that the first file is not the primary file.

A system for scanning, comprising:

• a processing circuitry;
• and
• a memory, the memory containing instructions that, when executed by the processing circuitry, configure the system to:
• identify an entity in a computing environment based on a scan of the computing environment, wherein the entity is defined with respect to a relationship between the entity and a storage volume in the computing environment;
• restore a snapshot of the entity to a running volume by creating a volume based on the snapshot;
• analyze data of the running volume in order to identify at least one database;
• and running each of the identified at least one database, wherein running each database further comprises mapping the database to at least one engine based on at least one file of the running volume, wherein the database is run based on the at least one engine to which the database is mapped, wherein the system is further configured to:
• determine at least one configuration for the database based on the at least one engine to which the database is mapped, wherein the at least one configuration has a plurality of configuration parameters, wherein the database is run based on the at least one configuration determined for the database;
• determine a minimal configuration for the database based on the plurality of configuration parameters of the at least one configuration determined for the database, wherein the minimal configuration is at least one minimal configuration parameter selected from among the plurality of configuration parameters, wherein the database is run using the minimal configuration determined for the database, wherein the at least one minimal configuration parameter includes a primary file;
• run the database during a first run using a first file as the primary file;
• determine that the first file is not the primary file;
• and
• modify the at least one minimal configuration parameter to include a second file as the primary file when it is determined that the first file is not the primary file.