Query :- Does antivirus software comes under installed software or Running software

Recently one of my existing customers raised a query on the discovery mechanism of installed software and running software...It would be great if you could share some of the supporting links to share with customers.

basically, they wanted to understand, if the customer will run discovery on any specific server /node then the installed Antivirus software will fall under the installed software or Running software 

  • I recently used a similar query for looking at Agent install for Ops Agent on our devices. I actually used both Installed and Running to do separate checks. For AV I would do the same. 

    What Nodes have the product installed vs which have them running. That then gives 2 streams for resolution. Fix the nodes where its not working but installed and the other to the deployment/patching teams to ensure they are setting up processed to capture the servers in there processes.