Security Operations Resources

• NIST SP 800-61 — computer security incident-handling guidance.
• CISA Known Exploited Vulnerabilities Catalog — vulnerabilities with evidence of exploitation.
• MITRE ATT&CK — adversary tactics and techniques knowledge base.
• FIRST CVSS — CVSS specifications and resources.

Apply your organization’s incident plan, evidence-handling requirements, legal obligations, and escalation process to actual incidents.