Threat intel, DFIR
and security notes
Deep-dives, investigation write-ups, tooling notes and transparent product updates from the mlab team. Written for analysts who want the indicators, the method and the fix.
#vulnerability-management
Newest first
CVSS 4.0 Explained: Reading a Vector String Step by Step
CVSS 4.0 renamed, split and added metrics, dropped Scope, and introduced labels like CVSS-BT so you know which score you are looking at. A metric by metric walkthrough of a 4.0 vector, and what changed from 3.1.
Anatomy of a CVE: From Discovery to Your Patch Queue
Follow a vulnerability through its full lifecycle: discovery, coordinated disclosure, CNA assignment, NVD enrichment, publication, and exploitation, and learn what every field of a CVE entry really tells you.
Patch Tuesday Survival Guide: Building a Monthly Vulnerability Workflow
A repeatable monthly process for Patch Tuesday: same-day triage with KEV and EPSS, patch windows by asset class, deadlines people respect, and verification that closes the loop.
inkdex: an index that states facts, a scanner that judges them
Studies, benchmarks and build notes. Method first, numbers included, losses too.
Read the latest note