Escalation note: ransomware relevance is a pressure signal, not proof of compromise. Use IR criteria when exploitation evidence, dangerous exposure, containment needs, or business-impact urgency appears.
Ransomware-Relevant
Track vulnerabilities that could matter for ransomware access, escalation, or operational disruption.
This hub prioritizes exploit pressure, KEV, public PoC, auth bypass, remote access, edge exposure, and no-patch risk.
Priority Queue
Ransomware-relevant items in view
Defender Checklist