The tool performs checks such as analysis of changed or newly added files, registry keys, services, ActiveX Controls, listening ports, access control lists and other parameters that affect a computer's attack surface, giving an overview of the changes to the system Microsoft considers important to the security of the platform.