Skip to content

Commit 140684a

Browse files
authored
Enhance measure description for exploit likelihood
Clarify measure description and add detail to the explanation.
1 parent 953d06d commit 140684a

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

src/assets/YAML/default/TestAndVerification/StaticDepthForApplications.yaml

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -324,7 +324,8 @@ Test and Verification:
324324
uuid: f2f0f274-c1a0-4501-92fe-7fc4452bc8ad
325325
risk: |-
326326
Without proper prioritization, organizations may waste time and effort on low-risk vulnerabilities while neglecting critical ones.
327-
measure: Estimate the likelihood of exploitation by using data (CISA KEV) from the past or prediction models (EPSS).
327+
measure: Estimate the likelihood of exploitation by using data (CISA KEV) from the past or prediction models (e.g. Exploit Prediction Scoring System, EPSS).
328+
description: Severity-based vulnerability triage alone generates a lot false positives, requiring a more refined approach.
328329
difficultyOfImplementation:
329330
knowledge: 2
330331
time: 2

0 commit comments

Comments
 (0)