Appearance
Check for spoofing and proper segmentation.
Enumerate popular containers, hypervisors and platforms.
Detect common misconfigurations across different stacks.