Defensive Security
Vulnerability Prioritization & Purple Team
Turn a CVE into severity, ATT&CK mapping, adversary emulation, purple-team exercise, detection content, and an incident-response playbook in one chain.
Looks up the CVE from the NVD, derives its CVSS base score from the NVD's own vector string when available (falling back to a neutral all-None vector otherwise so the step still runs), maps the ATT&CK matrix, builds an adversary emulation plan for the selected threat actor, generates a paired purple-team exercise, and produces Sigma/SIEM/IDS detection content plus a validation summary and response playbook. The SIEM query and IDS rule steps use a fixed representative hunt scenario/rule type rather than every option this workflow's own fields don't expose, matching this app's established simplification for multi-tool chains (see the batch 6/7 comments above).
Tool chain
- CVE Lookup & Enrichment
- Vulnerability Feed
- CVSS v3.1 Calculator
- MITRE ATT&CK Navigator
- Adversary Emulation Planner
- Purple Team Exercise Generator
- Sigma Rule Generator
- SIEM Query Builder
- IDS/IPS Rule Tester
- Detection Engineering Validator
- IR Playbook Generator