1. A method for remotely auditing a security posture of a client machine at a centralized server, the method comprising: receiving, at the centralized server, a report, wherein the report comprises entries associated with security events or security states or both related to the client machine; detecting a pattern among one or more reports, wherein the pattern indicates a probable security attack at the client machine; and classifying the security posture of the client machine based on the detected pattern.