gsadmin/AutopilotMonitor
1
0
Fork 0
mirror of https://github.com/okieselbach/AutopilotMonitor.git synced 2026-10-24 04:32:32 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix rule

Browse Source
This commit is contained in:
Oliver Kieselbach
2026-03-20 14:56:10 +01:00
parent b62c2c554a
commit 709905fac9
2 changed files with 2 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/analyze/ANALYZE-ID-003.json
+1 -9
View File
@@ -31,15 +31,7 @@
}
],
"confidenceFactors": [
{
"signal": "kev_confirmed",
"source": "event_data",
"eventType": "vulnerability_report",
"dataField": "scan_summary.kev_matches",
"operator": "gte",
"value": "1",
"weight": 10
}
{ "signal": "kev_confirmed", "condition": "exists", "weight": 10 }
],
"confidenceThreshold": 80,
"explanation": "The device has installed software with critical vulnerabilities. Software with CVEs rated CRITICAL (CVSS >= 9.0) or listed in the CISA Known Exploited Vulnerabilities catalog was detected. These vulnerabilities are actively targeted by attackers and should be remediated immediately.",
rules/dist/analyze-rules.json
Generated Vendored
+1 -9
View File
@@ -1143,15 +1143,7 @@
}
],
"confidenceFactors": [
{
"signal": "kev_confirmed",
"source": "event_data",
"eventType": "vulnerability_report",
"dataField": "scan_summary.kev_matches",
"operator": "gte",
"value": "1",
"weight": 10
}
{ "signal": "kev_confirmed", "condition": "exists", "weight": 10 }
],
"confidenceThreshold": 80,
"explanation": "The device has installed software with critical vulnerabilities. Software with CVEs rated CRITICAL (CVSS >= 9.0) or listed in the CISA Known Exploited Vulnerabilities catalog was detected. These vulnerabilities are actively targeted by attackers and should be remediated immediately.",