skills.rest
riparino
riparinoCOMMUNITY
Explore all skills by this author →
GitHub

defensive-vulnerability-management

Automates vulnerability prioritization and remediation using KQL enrichment and patch verification.

1|Updated Apr 27, 2026
Search Tags:#vulnerability#vulnerability-management#cvss#patching#kql#epss#tvm
One-click install
npx skills add https://github.com/riparino/Claude-Cyber --skill defensive-vulnerability-management
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: defensive-vulnerability-management
Source: https://github.com/riparino/Claude-Cyber/tree/main/Claude-Blue/Skills/defensive-vulnerability-management
Command: npx skills add https://github.com/riparino/Claude-Cyber --skill defensive-vulnerability-management

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Vulnerability management is a complex lifecycle that combines CVSS and EPSS prioritization, regular scanning cadences, and patch verification. This skill provides structured guidance to surface critical, exploitable flaws and to drive remediation and reporting across the organization.

Core Features & Use Cases

  • Prioritize vulnerabilities using CVSS and EPSS to flag the highest-risk findings.
  • Surface critical, unpatched CVEs with public exploits using TVM data integrations and KQL enrichment.
  • Verify patches by re-scanning inventories and validating updated versions across devices.
  • Generate posture and compliance reports for security leadership (CISO, executive audiences).

Quick Start

Execute a TVM search for critical CVEs, verify patch status across inventory, and generate a remediation plan.

Frequently Asked Questions about defensive-vulnerability-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prioritize vulnerabilities using CVSS and EPSS scores?▼

Vulnerability prioritization using CVSS and EPSS scores flags the highest-risk findings by surfacing critical, exploitable flaws. This approach rapidly triages critical CVEs to drive remediation across unpatched systems based on risk thresholds.

Can I use KQL to query DeviceTvmSoftwareVulnerabilities for unpatched systems?▼

KQL enrichment queries DeviceTvmSoftwareVulnerabilities and DeviceTvmSoftwareVulnerabilitiesKB to surface critical unpatched CVEs with public exploits. It automates vulnerability prioritization and remediation across enterprise asset inventories.

How do I verify patches across a device inventory after remediation?▼

Patch verification validates updated software versions across devices by re-scanning inventories using DeviceTvmSoftwareInventory. This confirms remediation success and enforces patch SLA compliance based on CVSS and EPSS thresholds.

What is the best way to generate compliance reports for security leadership?▼

Generating posture and compliance reports for security leadership involves summarizing vulnerability scanning and patch verification data. This provides CISO and executive audiences with visibility into remediation progress and SLA enforcement.

Does vulnerability management work for enterprise security operations teams?▼

Vulnerability management supports security operations teams managing enterprise asset inventories and patch cycles. It automates prioritization and remediation to rapidly triage critical CVEs and enforce patching SLAs across complex environments.

Related Skills

Explore More Data & Analytics Skills→
jassicsjassics
6

vulnerability-scan-triage

Normalize and deduplicate vulnerability scan findings from multiple scanners.

Community
Intermediate
DCx7C5DCx7C5

nessus-SKILL.md

Identify known vulnerabilities and misconfigurations using Tenable Nessus scans.

Community
Advanced
workromancerworkromancer

web-load2

Fetch web URLs and extract all text content.

Community
Basic
DCx7C5DCx7C5

vulnerabilities-SKILL.md

Prioritize CVEs by CVSS scores enriched with EPSS and KEV data.

Community
Advanced