Cyber KEV Triage
Overview
Create a patch-priority plan by combining vulnerability severity, exploitation status, and business criticality of affected assets.
Workflow
- 1. Collect vulnerabilities with CVE, CVSS, exploitation indicator, and affected asset.
- Map each vulnerability to asset criticality.
- Score and rank vulnerabilities into patch priority tiers.
- Produce concise remediation summary and due-window guidance.
Use Bundled Resources
- - Run
scripts/kev_triage.py for deterministic triage output. - Read
references/triage-method.md for scoring rationale and review checks.
Guardrails
- - Keep output defensive and remediation-focused.
- Do not generate exploit payloads or offensive execution steps.
Cyber KEV 分类排查
概述
通过结合漏洞严重性、利用状态以及受影响资产的业务关键性,制定补丁优先级计划。
工作流程
- 1. 收集包含CVE编号、CVSS评分、利用指标及受影响资产的漏洞信息。
- 将每个漏洞映射至资产关键性等级。
- 对漏洞进行评分与排序,划分补丁优先级层级。
- 生成简洁的修复摘要及修复时限指引。
使用捆绑资源
- - 运行 scripts/kev_triage.py 获取确定性分类排查输出。
- 阅读 references/triage-method.md 了解评分原理与复核检查项。
约束准则
- - 输出内容应保持防御性,聚焦修复方案。
- 不得生成漏洞利用载荷或攻击性执行步骤。