Not sure I agree. It might sound like theater if you expect it to solve your security issues. But it is extremely good at finding undocumented or broken processes - these processes tend to hide the biggest offenders.