Is there any tool through which we can generate SBOM report ( SPDX / CycloneDX) for Windows programs ?
There are many tools available which can scan Linux OS packages and application packages ( e.g java , maven, .net) like Trivy,Syft,whitesource but it looks like there is no tool available which can generate SBOM report for the applications installed on Microsoft Windows.
Pls suggest.
Thanks Abdul Mohsin