Findings
Generator
Configuration
Lucidum Reverse
Architecture
Statistics
← All Findings
Vendor:
Orca Security
FIN-646
Weight:
5
4
3
2
1
Confidence:
High
Medium
Low
Not Verified
What It Detects
Orca asset without tags that has critical CVEs. Untagged assets with critical vulnerabilities are particularly dangerous because the lack of tags means ownership is unclear, making it difficult to assign and track remediation. These assets often fall through the cracks of vulnerability management programs.
MITRE ATT&CK Techniques
Comma-separated, e.g. T1078, T1190
Checks
read-only
Field
Operator
Value
Connectors
match
Orca
Critical CVE List
match
.*
Extra_Data
not or
[{'field': 'Tag', 'value': '.*', 'operator': 'match'}]
Remediation
+ Add item
Why It Matters
+ Add item
Save Changes
Export Lucidum