3 ms·

Have you tried cis-cat? I think it was designed explicitly for that, to scan for local OS vulnerabilities.