re https://infosec.exchange/@ntkramer/117435494733419807 - challenge to the CISA KEV team: make it spell out something.
Search
3 results for “ntkramer”
-
It even includes a heatmap, timeline, and RSS feed that tracks the still-sneaky ransomware use flips!
Some prior work that came out of this:
- https://www.greynoise.io/blog/unmasking-cisas-hidden-kev-ransomware-updates
→ which led to a bot account that tracks the flips: https://infosec.exchange/@kev_Stalker
- https://www.greynoise.io/blog/unveiling-vulnerability-insights-from-the-cisa-kev-catalog-at-bsideslv -
If you've followed my work, you know I've always watched the KEV because you can infer intel from it. I'm always hunting for the between-the-lines "so what" in data and I've done talks and research on inferred KEV intel.
One tool I've leaned on is a dashboard I built to track trends, ransomware changes, comparisons, etc. Well, @hrbrmstr ~strongarmed~ helped me get it online for everyone!
You can find it on our burgeoning site: https://kev.inferenceandin.tel