Vulnerabilities uncovered

As explained in Cyber Threat Hunting

The total count of vulnerabilities discovered through the threat-hunting process.

Vulnerabilities uncovered measures the total number of vulnerabilities found through the threat-hunting process. It helps evaluate threat-hunting performance alongside incidents, monitoring use cases, and misconfigurations discovered. section 2.7.1

Report the metric with enough context to make it useful:

• State the representation, such as a number, percentage, or binary value. section 12.3
• Specify the measurement period, because time-bounded values support comparison and trend analysis. section 12.3
• Track it with related operational measures, including threat-hunting expeditions, incidents uncovered, and configuration problems. section 12.5.3

Dashboard example

A monthly dashboard records eight threat-hunting expeditions and six vulnerabilities uncovered. The count can be reviewed with three incidents, sixteen configuration problems, and six new monitoring rules identified during the same period. section 12.5.3

Figure 12.7 Threat-hunting dashboard for the security operations manager

Use the threat-hunting dashboard to inspect vulnerabilities uncovered alongside related operational metrics. section 12.5.3

How Cyber Threat Hunting covers it

How deep it goes

Defines a total count, specifies reporting context, and stops short of prescribing vulnerability-discovery procedures.

Examples

Uses a dashboard reporting six vulnerabilities across eight expeditions during one month.

What it assumes

Assumes a threat-hunting process and introduces vulnerability counts as one metric within its broader measurement framework.

What you can do after

Evaluate threat-hunting performance and compare vulnerability findings across defined reporting periods.

How it connects

Connects threat hunting with security incidents, security monitoring use cases, misconfigurations, and incident response.

liveBookmanning.com

Read Cyber Threat Hunting on liveBook Get the book at manning.com

Related concepts

• security incidents uncoveredmeasures · The count of security incidents discovered by threat hunting and referred for incident response.

This explainer was generated by Manning's knowledge graph from the text of Cyber Threat Hunting. The section links point to the parts of the book it draws on.