Exploit Hound: risk scores, Fix First and Threat Radar

Skills you'll practise

• Explain a finding's Exploit Hound risk score from its named factors and stored scoring version
• Use the evidence-strength terms precisely and never claim more than the evidence supports
• Choose the first action from a Fix First worklist and explain what its path counts and estimates mean
• Interpret a Fix First prediction result, including when other remediation overlapped
• Read CISA KEV, EPSS and CVSS on the Threat Radar correctly and avoid telling a customer they are affected from a catalog alone

Course outline

1. 1.Exploit Hound: risk scores, Fix First and Threat RadarVideo · 2 min
2. 2.How a finding's score is builtLesson · 17 min
3. 3.Fix First: rank the work, then check the predictionLesson · 17 min
4. 4.Reading the Threat RadarLesson · 16 min
5. 5.Exploit Hound: risk scores, Fix First and Threat Radar: knowledge checkKnowledge check · 16 questions
6. 6.A known-exploited flaw on the clinic's VPNScenario
7. 7.Final exam8 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• Exploit Hound: Resources and FAQ (terminology, how the risk score is built)
• Exploit Hound: platform overview (architecture, scoring, attack paths, identity, ticketing, alerting, verification, exceptions)
• Exploit Hound: Vulnerability prioritization
• Exploit Hound: Fix First prioritization
• Exploit Hound: Product tour (twelve console screens on demonstration data)
• Exploit Hound: Interactive demo (illustrative scoring model on synthetic findings)
• Exploit Hound: Integrations and their status (GA, Beta, Not Built)
• Exploit Hound: Threat Radar (public CISA KEV and EPSS view)
• CISA: Known Exploited Vulnerabilities Catalog
• FIRST: Exploit Prediction Scoring System (EPSS)
• FIRST: Common Vulnerability Scoring System (CVSS)