Understanding Prioritization Methods for Enterprise Vulnerability Management w/ Orange Cyberdefense

[@RussellBWalker]

Very informative with great ideas

[@jbmaillet]

16:57 actual dig into the the CVSS EPSS KEV topic. Mostly KEV.
32:51 EPSS.
46:32 Threat / Risk. "Defenders think in lists, attackers thing in graph".
50:40 Asset intelligence.

[@jbmaillet]

And what about SSVC? Maybe next time?