MY公共机构
MyCERT
Incident response and security advisories in Malaysia.
国际网络安全门户 / DIRECTORY
连接全球专业知识。
公共机构、响应团队、企业与研究。寻找适合您所在国家和需求的信息源。
FIRST资料分布 · 883
快照中的资料数 : 883 ·
- Government, Private and Public sectors
252 / 883 252 - Other commercial
207 / 883 207 - Industrial sector
95 / 883 95 - Financial sector
94 / 883 94 - ICT vendor customer base
57 / 883 57 - 未说明领域
50 / 883 50 - Government & military
46 / 883 46 - Research & education
45 / 883 45 - ISP customer base
37 / 883 37
国家和领域不能确定其服务范围。请在官方资料中确认服务条件。 FIRST ↗
AU公共机构
Australian Cyber Security Centre
Australian cybersecurity guidance and resources.
NC公共机构
NCSC · New Zealand
New Zealand cybersecurity guidance and information.
DG公共机构
DGSSI · Maroc
Morocco information systems security authority.
AG公共机构
Agence Nationale de la Cybersécurité · Tunisie
Tunisian national cybersecurity resources.
NG公共机构
ngCERT
Nigeria national computer emergency response team.
KE公共机构
KE-CIRT/CC
Kenya national incident response coordination.
CY公共机构
Cybersecurity Hub · South Africa
Public cybersecurity resources in South Africa.
NA公共机构
National Cybersecurity Authority · Saudi Arabia
National cybersecurity guidance and controls.
AE公共机构
aeCERT · TDRA
UAE telecommunications and cybersecurity resources.
IS公共机构
Israel National Cyber Directorate
Public national cyber directorate resources.
FI社区与标准
FIRST
International network of incident response teams.
CE社区与标准
Center for Internet Security
Security controls and benchmarks.
MI私营部门
Microsoft Security
Security research and analysis published by Microsoft.
GO私营部门
Google Threat Intelligence
Threat intelligence research publications.
UN私营部门
Unit 42 · Palo Alto Networks
Threat research and technical reports.
CI私营部门
Cisco Talos
Threat analysis and research publications.
CL私营部门
Cloudflare
Networking, security and infrastructure analysis.
FI社区与标准
FIRST · EPSS
Vulnerability exploitation probability model. Compare with technical severity, local exposure and business impact.
参考资料详情
- 已核实的数据或指标
- The model looks ahead 30 days. Its score is a probability; its percentile ranks that score relative to other CVEs.
- 使用方法
- Record the data date and distinguish probability from percentile. Add asset exposure and confirmed exploitation evidence.
- 需要保留的局限
- The model does not predict harm to your organisation. Low probability does not cancel a critical exposure.
文档核查日期
CVSS、EPSS、KEV 与 VEX
What is the estimated probability of observing exploitation of this CVE in the next thirty days?
It does not describe compromise of your instance, its controls or business loss.
Read the CVSS, EPSS, KEV and VEX reference →
Primary sources and scope
- FIRST · EPSS Frequently Asked Questions · Living FAQ · reviewed 2026-10-22
What is EPSS? · Reading the score · Percentile · Score changes
Sources checked on
FI社区与标准
FIRST · CVSS
Vulnerability severity specification and calculators. A score alone does not describe organisation-specific risk.
参考资料详情
- 已核实的数据或指标
- CVSS 4.0 scores run from 0.0 to 10.0. Base, Threat, Environmental and Supplemental metric groups serve different purposes.
- 使用方法
- Retain the score version, vector and date. Compare it with the installed version, access paths and business consequences before ordering remediation.
- 需要保留的局限
- A high score is not evidence of exploitation; a low score does not mean a service has no risk.
文档核查日期
CVSS、EPSS、KEV 与 VEX
What is the technical severity under the assessed metrics?
The score proves neither exploitation nor consequences for your service.
Read the CVSS, EPSS, KEV and VEX reference →
Primary sources and scope
- FIRST · CVSS 4.0 Specification · CVSS 4.0 · document 1.2 · reviewed 2026-10-22
Overview · Assessment · Nomenclature · Supplemental Metrics
Sources checked on
CV社区与标准
CVE Program
Public vulnerability identifiers and records. Check products, affected versions and links to original advisories.
参考资料详情
- 已核实的数据或指标
- A JSON schema defines the CVE record format. An identifier and the published contents of its record are distinct things.
- 使用方法
- Open the record and references; check its state, described affected versions and supplier information. Keep the identifier in action tracking.
- 需要保留的局限
- A CVE identifier is neither a severity score nor proof that your installation is affected.
文档核查日期
NI公共机构
NIST · National Vulnerability Database
Vulnerability database and technical enrichment. Cross-check records against vendor advisories and the deployed configuration.
NI公共机构
NIST · Cybersecurity Framework
Cyber risk management framework and implementation resources. Organises intended outcomes rather than providing certification.
参考资料详情
- 已核实的数据或指标
- CSF 2.0 has six functions: Govern, Identify, Protect, Detect, Respond and Recover. It does not prescribe a single way to achieve outcomes.
- 使用方法
- Describe current and target profiles with evidence, gaps and owners. Connect each priority to the services it helps protect.
- 需要保留的局限
- Mapping to the framework is neither certification nor proof that every control works.
文档核查日期
网络事件：恢复决策与证据
Qualifying a signal, preserving investigative material and restoring a service answer different questions. CSF 2.0 distinguishes recovery initiation, integrity of restoration assets, validation of restored assets and the end of recovery. These are outcomes to document, not certification or one mandatory procedure.
The twelve entries below are a selected, paraphrased part of CSF 2.0. Evidence columns, timelines and injects are original teaching proposals. They do not replace a local plan and imply no universal timing, severity level or authority. SP 800-61 Revision 3 has been final since April 2025 and supersedes Revision 2.
Explore NIST outcomes and the timeline →
Primary references and limits
Identifiers and outcome meanings come from CSF 2.0; SP 800-61r3 adds incident response and recovery recommendations. Evidence tables, times and scenarios are educational, with no client results, certification or actual notification.
- NIST · SP 800-61 Rev. 3 · Final · 2025-04-03
Community Profile CSF 2.0 ; remplace / supersedes Rev. 2 - NIST · SP 800-61r3 — recommandations détaillées / detailed recommendations · April 2025
Pages imprimées / printed pages 27–29, 34–35 : RS.MA, RS.AN, RC.RP, RC.CO - NIST · Cybersecurity Framework 2.0 · 2024-02-26 · NIST CSWP 29
Appendix A, printed pages 22–23 : official outcome identifiers - NIST · SP 800-184 — Guide for Cybersecurity Event Recovery · Final · 2016-12-22
Recovery planning, playbooks, testing and improvement
References reviewed
10CERT / CSIRT / SOC
104 CSIRT
- 完整名称
- 104 CSIRT
- FIRST资料所属领域
- Other commercial
- 所属组织
- 104 Corporation
- 所声明的团队类型
- CSIRT, SOC
- 所声明的成立时间
- October 18, 2017
- FIRST加入时间
- December 17, 2025
数据获取日期 · FIRST