Under construction

We're building something here. Check back soon.

Evidence Packs

Every VULONE finding ships with sources, confidence scoring, extracted IOCs, and full attribution context.

An evidence pack is VULONE's core output. It is a structured, machine-readable document that provides everything a security analyst needs to act on a finding.

Structure

  • finding — Summary of the threat signal
  • confidence — 0–1 score based on source count, recency, and correlation strength
  • sources — Array of source references with timestamps and URLs
  • iocs — Extracted indicators: IPs, domains, hashes, file paths
  • mitre_attack — Mapped tactics, techniques, and sub-techniques
  • remediation — Patch guidance, workarounds, and detection rules

Example

{
  "cve": "CVE-2024-1234",
  "kev_score": 0.93,
  "exploit_maturity": "active",
  "ransomware_usage": true,
  "sources": 12,
  "iocs": ["192.168.1.1", "evil.com"],
  "mitre_attack": ["T1190", "T1059"]
}