Skill UI

Integrates FIRST's Exploit Prediction Scoring System (EPSS) API to estimate the probability of a CVE being exploited in the wild within 30 days. This tool moves beyond traditional severity scoring (CVSS) by providing a likelihood measure, allowing security teams to implement a risk-based remediation strategy by combining EPSS scores with CVSS scores to assign immediate, urgent, or low priorities.

This skill guides the systematic process of mitigating endpoint vulnerabilities. It involves calculating a comprehensive risk score by combining CVSS, EPSS, and CISA KEV data to prioritize findings. The workflow covers deployment of patches via platforms like WSUS/SCCM/Intune, applying necessary configuration changes, handling zero-day workarounds, and validating the fix to ensure endpoint compliance and system security.

This comprehensive guide details the process of performing authenticated and unauthenticated vulnerability assessments using Tenable Nessus. It covers everything from advanced scan configuration (port discovery, credentialing, plugin setup) to detailed result analysis, including cross-referencing CVEs and prioritizing remediation based on CVSS scores and exploit availability. Ideal for compliance auditing, penetration testing, and maintaining system patch compliance.