LAUNCH CLOUD PRO HEALTHCARE GOVERNMENT ORACLE PRO Enterprise Application COMMAND CENTER RECON
Tier: LAUNCH  |  Pricing: Contact sales  |  Agents reporting (5): canvas, engage, genesis, overwatch, predict  |  Scan date: 2026-09-20
44
Total Findings
1
Critical
19
High
13
Medium
11
Low
1
Clouds Scanned
CRITICALgenesisP90GEN-846D57F4

Generated agent 'payroll_watch' is registered but missing from disk

Resource: payroll_watch
UNCLASSIFIED · 2026-09-20 21:28:54
Detector: GEN-005
Generated agent 'payroll_watch' is registered but missing from disk
Nothing ships that has not been compiled and imported in this process.
Proposed fix
Repair loop regenerates from the validated spec.
Effort: 60 min (~$145 labour) · Blast radius: \b(vm|instance|disk|nic|function|container)\b
Citation: TITAN build standard
HIGHengageP75ENG-917CF380

Patient access request received but not logged in tracking system

Resource: titan-proof-prod-0920160806
UNCLASSIFIED · 2026-09-20 21:28:53
Detector: ENG-004
Patient access request received but not logged in tracking system
Logged access requests are needed for SLA tracking and OCR audit response.
Proposed fix
Universal access-request intake (portal + phone + paper); ticket created; SLA timer starts.
Effort: 60 min (~$145 labour) · Expected annual loss: $17,474 · Blast radius: single resource
Citation: HIPAA 164.524
HIGHengageP75ENG-917CF380

Patient access request received but not logged in tracking system

Resource: titan-proof-prod-0920160806
UNCLASSIFIED · 2026-09-20 21:28:53
Detector: ENG-004
Patient access request received but not logged in tracking system
Logged access requests are needed for SLA tracking and OCR audit response.
Proposed fix
Universal access-request intake (portal + phone + paper); ticket created; SLA timer starts.
Effort: 60 min (~$145 labour) · Expected annual loss: $17,474 · Blast radius: single resource
Citation: HIPAA 164.524
HIGHengageP75ENG-77AC523A

Patient access request received but not logged in tracking system

Resource: titan-proof-cui-0920160806
UNCLASSIFIED · 2026-09-20 21:28:53
Detector: ENG-004
Patient access request received but not logged in tracking system
Logged access requests are needed for SLA tracking and OCR audit response.
Proposed fix
Universal access-request intake (portal + phone + paper); ticket created; SLA timer starts.
Effort: 60 min (~$145 labour) · Expected annual loss: $17,474 · Blast radius: single resource
Citation: HIPAA 164.524
HIGHengageP75ENG-1E8D71C4

Patient access request received but not logged in tracking system

Resource: titan-proof-dev-0920160806
UNCLASSIFIED · 2026-09-20 21:28:53
Detector: ENG-004
Patient access request received but not logged in tracking system
Logged access requests are needed for SLA tracking and OCR audit response.
Proposed fix
Universal access-request intake (portal + phone + paper); ticket created; SLA timer starts.
Effort: 60 min (~$145 labour) · Expected annual loss: $17,474 · Blast radius: single resource
Citation: HIPAA 164.524
HIGHengageP75ENG-09BEEC32

Patient access request received but not logged in tracking system

Resource: cloudtrail
UNCLASSIFIED · 2026-09-20 21:28:53
Detector: ENG-004
Patient access request received but not logged in tracking system
Logged access requests are needed for SLA tracking and OCR audit response.
Proposed fix
Universal access-request intake (portal + phone + paper); ticket created; SLA timer starts.
Effort: 60 min (~$145 labour) · Expected annual loss: $17,474 · Blast radius: single resource
Citation: HIPAA 164.524
HIGHengageP75ENG-1E8D71C4

Patient access request received but not logged in tracking system

Resource: titan-proof-dev-0920160806
UNCLASSIFIED · 2026-09-20 21:28:53
Detector: ENG-004
Patient access request received but not logged in tracking system
Logged access requests are needed for SLA tracking and OCR audit response.
Proposed fix
Universal access-request intake (portal + phone + paper); ticket created; SLA timer starts.
Effort: 60 min (~$145 labour) · Expected annual loss: $17,474 · Blast radius: single resource
Citation: HIPAA 164.524
HIGHpredictP75PRD-7D4ADBC3

Production ML model showing significant drift vs validation baseline

Resource: PRD-001-target
UNCLASSIFIED · 2026-09-20 21:29:16
Detector: PRD-001
Production ML model showing significant drift vs validation baseline
Drift = degraded predictions = bad decisions / fraud false-negatives. Retrain or roll back.
Proposed fix
Drift monitoring (PSI / KS) on features + outputs; auto-retrain trigger; rollback path.
Effort: 60 min (~$145 labour) · Blast radius: single resource
Citation: NIST AI RMF; ISO/IEC 23894
HIGHoverwatchP75OVW-0EEECF8F

A single environment carries a disproportionate share of total exposure — 77% of total modelled exposure

Resource: prod
UNCLASSIFIED · 2026-09-20 21:28:55
Detector: OVW-006
A single environment carries a disproportionate share of total exposure — 77% of total modelled exposure
Concentrated risk is the cheapest thing to fix first — one environment, most of the benefit.
Proposed fix
Prioritise the named environment in the next remediation window.
Effort: 60 min (~$145 labour) · Blast radius: single resource
Citation: NIST 800-53 RA-3
HIGHoverwatchP75OVW-5C004D86

Workloads found in a cloud that has no monitoring coverage — connected but produced no findings — check the reader role

Resource: azure
UNCLASSIFIED · 2026-09-20 21:28:55
Detector: OVW-004
Workloads found in a cloud that has no monitoring coverage — connected but produced no findings — check the reader role
Estates drift across clouds faster than tooling follows. The uncovered cloud is the one that gets breached.
Proposed fix
Extend TITAN coverage to the uncovered cloud.
Effort: 60 min (~$145 labour) · Blast radius: single resource
Citation: NIST 800-53 SI-4
HIGHoverwatchP75OVW-79D5006B

Workloads found in a cloud that has no monitoring coverage — connected but produced no findings — check the reader role

Resource: aws
UNCLASSIFIED · 2026-09-20 21:28:55
Detector: OVW-004
Workloads found in a cloud that has no monitoring coverage — connected but produced no findings — check the reader role
Estates drift across clouds faster than tooling follows. The uncovered cloud is the one that gets breached.
Proposed fix
Extend TITAN coverage to the uncovered cloud.
Effort: 60 min (~$145 labour) · Blast radius: single resource
Citation: NIST 800-53 SI-4
HIGHoverwatchP75OVW-874593EC

Workloads found in a cloud that has no monitoring coverage — connected but produced no findings — check the reader role

Resource: gcp
UNCLASSIFIED · 2026-09-20 21:28:55
Detector: OVW-004
Workloads found in a cloud that has no monitoring coverage — connected but produced no findings — check the reader role
Estates drift across clouds faster than tooling follows. The uncovered cloud is the one that gets breached.
Proposed fix
Extend TITAN coverage to the uncovered cloud.
Effort: 60 min (~$145 labour) · Blast radius: single resource
Citation: NIST 800-53 SI-4
HIGHpredictP75PRD-BDB1B30E

Bias / fairness metrics not monitored in production

Resource: titan-proof-cui-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-004
Bias / fairness metrics not monitored in production
Fair-lending and ECOA require fairness monitoring on credit / risk decisions.
Proposed fix
Disparate impact / equalized odds metrics in dashboard; quarterly review by risk + compliance.
Effort: 240 min (~$580 labour) · Expected annual loss: $2,422 · Blast radius: single resource
Citation: NIST AI RMF; CFPB / OCC fair-lending guidance; EU AI Act
HIGHpredictP75PRD-366A7DF6

Bias / fairness metrics not monitored in production

Resource: titan-proof-prod-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-004
Bias / fairness metrics not monitored in production
Fair-lending and ECOA require fairness monitoring on credit / risk decisions.
Proposed fix
Disparate impact / equalized odds metrics in dashboard; quarterly review by risk + compliance.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: NIST AI RMF; CFPB / OCC fair-lending guidance; EU AI Act
HIGHpredictP75PRD-366A7DF6

Bias / fairness metrics not monitored in production

Resource: titan-proof-prod-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-004
Bias / fairness metrics not monitored in production
Fair-lending and ECOA require fairness monitoring on credit / risk decisions.
Proposed fix
Disparate impact / equalized odds metrics in dashboard; quarterly review by risk + compliance.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: NIST AI RMF; CFPB / OCC fair-lending guidance; EU AI Act
HIGHpredictP75PRD-4B12152F

Bias / fairness metrics not monitored in production

Resource: titan-proof-dev-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-004
Bias / fairness metrics not monitored in production
Fair-lending and ECOA require fairness monitoring on credit / risk decisions.
Proposed fix
Disparate impact / equalized odds metrics in dashboard; quarterly review by risk + compliance.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: NIST AI RMF; CFPB / OCC fair-lending guidance; EU AI Act
HIGHpredictP75PRD-52EF81A9

Bias / fairness metrics not monitored in production

Resource: cloudtrail
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-004
Bias / fairness metrics not monitored in production
Fair-lending and ECOA require fairness monitoring on credit / risk decisions.
Proposed fix
Disparate impact / equalized odds metrics in dashboard; quarterly review by risk + compliance.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: NIST AI RMF; CFPB / OCC fair-lending guidance; EU AI Act
HIGHpredictP75PRD-4B12152F

Bias / fairness metrics not monitored in production

Resource: titan-proof-dev-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-004
Bias / fairness metrics not monitored in production
Fair-lending and ECOA require fairness monitoring on credit / risk decisions.
Proposed fix
Disparate impact / equalized odds metrics in dashboard; quarterly review by risk + compliance.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: NIST AI RMF; CFPB / OCC fair-lending guidance; EU AI Act
HIGHpredictP75PRD-837C38F9

Risk model not validated in last 12 months

Resource: PRD-003-target
UNCLASSIFIED · 2026-09-20 21:29:16
Detector: PRD-003
Risk model not validated in last 12 months
Annual validation by independent function. Document validation outcome and decisions.
Proposed fix
Annual MRM validation; documented in model inventory; remediation tracked.
Effort: 60 min (~$145 labour) · Blast radius: \b(vm|instance|disk|nic|function|container)\b
Citation: Fed SR 11-7 (Model Risk Mgmt); NIST AI RMF
HIGHpredictP75PRD-FF7E15E3

Bias / fairness metrics not monitored in production

Resource: PRD-004-target
UNCLASSIFIED · 2026-09-20 21:29:16
Detector: PRD-004
Bias / fairness metrics not monitored in production
Fair-lending and ECOA require fairness monitoring on credit / risk decisions.
Proposed fix
Disparate impact / equalized odds metrics in dashboard; quarterly review by risk + compliance.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: NIST AI RMF; CFPB / OCC fair-lending guidance; EU AI Act
MEDIUMpredictP55PRD-ECFFEC76

Brand / executive credentials not monitored on dark web

Resource: titan-proof-prod-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-007
Brand / executive credentials not monitored on dark web
Stolen creds appear on dark-web markets months before exploitation. Monitor + force reset.
Proposed fix
Vendor (Recorded Future / Flashpoint / SpyCloud) monitoring; auto-trigger forced password reset.
Effort: 60 min (~$145 labour) · Expected annual loss: $141 · Blast radius: single resource
Citation: Industry best practice; ENISA Threat Landscape
MEDIUMpredictP55PRD-ECFFEC76

Brand / executive credentials not monitored on dark web

Resource: titan-proof-prod-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-007
Brand / executive credentials not monitored on dark web
Stolen creds appear on dark-web markets months before exploitation. Monitor + force reset.
Proposed fix
Vendor (Recorded Future / Flashpoint / SpyCloud) monitoring; auto-trigger forced password reset.
Effort: 60 min (~$145 labour) · Expected annual loss: $141 · Blast radius: single resource
Citation: Industry best practice; ENISA Threat Landscape
MEDIUMpredictP55PRD-39DD67C6

Feature store lacks data lineage tracking

Resource: PRD-002-target
UNCLASSIFIED · 2026-09-20 21:29:16
Detector: PRD-002
Feature store lacks data lineage tracking
Without lineage, can't audit model inputs. Required for regulated-industry ML (SR 11-7, GDPR Art 22).
Proposed fix
Lineage tooling (DataHub, OpenLineage); pipeline metadata captures source -> feature.
Effort: 60 min (~$145 labour) · Expected annual loss: $127 · Blast radius: single resource
Citation: NIST AI RMF; data governance best practice
MEDIUMpredictP55PRD-808E68DF

Brand / executive credentials not monitored on dark web

Resource: PRD-007-target
UNCLASSIFIED · 2026-09-20 21:29:16
Detector: PRD-007
Brand / executive credentials not monitored on dark web
Stolen creds appear on dark-web markets months before exploitation. Monitor + force reset.
Proposed fix
Vendor (Recorded Future / Flashpoint / SpyCloud) monitoring; auto-trigger forced password reset.
Effort: 60 min (~$145 labour) · Expected annual loss: $141 · Blast radius: single resource
Citation: Industry best practice; ENISA Threat Landscape
MEDIUMoverwatchP55OVW-56E9634D

Billing data unreadable — spend and savings cannot be measured — could not convert string to float: 'None'

Resource: billing
UNCLASSIFIED · 2026-09-20 21:28:55
Detector: OVW-005
Billing data unreadable — spend and savings cannot be measured — could not convert string to float: 'None'
TITAN will not show an estimated spend figure in place of a measured one. Grant billing read access.
Proposed fix
Grant Cost Management Reader (Azure) / ce:GetCostAndUsage (AWS) / Billing Viewer (GCP).
Effort: 60 min (~$145 labour) · Blast radius: single resource
Citation: FinOps Foundation — visibility
MEDIUMoverwatchP55OVW-97BACEC9

Resources with no environment tag — cannot tell production from test — 103 findings on untagged resources

Resource: estate-wide
UNCLASSIFIED · 2026-09-20 21:28:55
Detector: OVW-003
Resources with no environment tag — cannot tell production from test — 103 findings on untagged resources
Without an environment label, every control decision and every cost allocation is guesswork.
Proposed fix
Apply the environment tag schema and enforce it with a deny policy.
Effort: 30 min (~$72 labour) · Blast radius: single resource
Citation: NIST 800-53 CM-8; FinOps Foundation — allocation
MEDIUMpredictP55PRD-D5794C25

Brand / executive credentials not monitored on dark web

Resource: titan-proof-cui-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-007
Brand / executive credentials not monitored on dark web
Stolen creds appear on dark-web markets months before exploitation. Monitor + force reset.
Proposed fix
Vendor (Recorded Future / Flashpoint / SpyCloud) monitoring; auto-trigger forced password reset.
Effort: 60 min (~$145 labour) · Expected annual loss: $150 · Blast radius: single resource
Citation: Industry best practice; ENISA Threat Landscape
MEDIUMpredictP55PRD-47D5AA1D

Brand / executive credentials not monitored on dark web

Resource: titan-proof-dev-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-007
Brand / executive credentials not monitored on dark web
Stolen creds appear on dark-web markets months before exploitation. Monitor + force reset.
Proposed fix
Vendor (Recorded Future / Flashpoint / SpyCloud) monitoring; auto-trigger forced password reset.
Effort: 60 min (~$145 labour) · Expected annual loss: $141 · Blast radius: single resource
Citation: Industry best practice; ENISA Threat Landscape
MEDIUMpredictP55PRD-CEF4A960

Brand / executive credentials not monitored on dark web

Resource: cloudtrail
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-007
Brand / executive credentials not monitored on dark web
Stolen creds appear on dark-web markets months before exploitation. Monitor + force reset.
Proposed fix
Vendor (Recorded Future / Flashpoint / SpyCloud) monitoring; auto-trigger forced password reset.
Effort: 60 min (~$145 labour) · Expected annual loss: $141 · Blast radius: single resource
Citation: Industry best practice; ENISA Threat Landscape
MEDIUMpredictP55PRD-47D5AA1D

Brand / executive credentials not monitored on dark web

Resource: titan-proof-dev-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-007
Brand / executive credentials not monitored on dark web
Stolen creds appear on dark-web markets months before exploitation. Monitor + force reset.
Proposed fix
Vendor (Recorded Future / Flashpoint / SpyCloud) monitoring; auto-trigger forced password reset.
Effort: 60 min (~$145 labour) · Expected annual loss: $141 · Blast radius: single resource
Citation: Industry best practice; ENISA Threat Landscape
MEDIUMpredictP55PRD-17A374FD

ML inference lacks adversarial-input detection

Resource: PRD-005-target
UNCLASSIFIED · 2026-09-20 21:29:16
Detector: PRD-005
ML inference lacks adversarial-input detection
Adversarial inputs (evasion, poisoning, extraction) require detection layer.
Proposed fix
Input-validation + anomaly check on prediction input; rate-limit; log + alert on detection.
Effort: 60 min (~$145 labour) · Blast radius: single resource
Citation: NIST AI RMF; MITRE ATLAS
MEDIUMpredictP55PRD-69708305

External threat intel feed not consumed by SOC tooling

Resource: PRD-006-target
UNCLASSIFIED · 2026-09-20 21:29:16
Detector: PRD-006
External threat intel feed not consumed by SOC tooling
Free + paid TI feeds (CISA AIS, ISAC, vendor) feed detections + blocklists.
Proposed fix
Subscribe to relevant TI; integrate via STIX/TAXII; auto-block confirmed bad IOCs.
Effort: 60 min (~$145 labour) · Blast radius: single resource
Citation: NIST 800-53 SI-5; SANS Critical Controls
MEDIUMpredictP55PRD-D502A4E5

Risk score not aligned to business risk tolerance

Resource: PRD-010-target
UNCLASSIFIED · 2026-09-20 21:29:16
Detector: PRD-010
Risk score not aligned to business risk tolerance
Risk scores must reflect business risk tolerance. Misaligned scores cause over- or under-action.
Proposed fix
Annual risk-tolerance review with business leaders; recalibrate scoring rubric.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: ISO 31000; NIST AI RMF
LOWpredictP35PRD-6C5FA903

Vulnerability prediction model lacks recent training data refresh

Resource: PRD-008-target
UNCLASSIFIED · 2026-09-20 21:29:16
Detector: PRD-008
Vulnerability prediction model lacks recent training data refresh
Vuln prediction tools weight CVEs over time; without refresh, prioritization is stale.
Proposed fix
Quarterly retraining; CVE feed integrated; EPSS score refresh.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: Internal best practice
LOWpredictP35PRD-C8C2749C

SOC analyst predictions diverge from actual incident outcomes

Resource: PRD-009-target
UNCLASSIFIED · 2026-09-20 21:29:16
Detector: PRD-009
SOC analyst predictions diverge from actual incident outcomes
Calibration matters. If analysts are 60% correct on 'critical' but model is 30%, retrain or recalibrate.
Proposed fix
Track analyst forecasts vs outcomes; quarterly calibration review; training adjustments.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: Internal best practice
LOWpredictP35PRD-75879349

Threat-hunting hypothesis logged but not tested

Resource: titan-proof-prod-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-012
Threat-hunting hypothesis logged but not tested
Threat hunting requires hypothesis-driven testing. Untested hypothesis = no defensive value.
Proposed fix
Hunt program tracks hypothesis -> test -> outcome; quarterly review of unfinished hunts.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: MITRE ATT&CK; SANS hunting
LOWpredictP35PRD-75879349

Threat-hunting hypothesis logged but not tested

Resource: titan-proof-prod-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-012
Threat-hunting hypothesis logged but not tested
Threat hunting requires hypothesis-driven testing. Untested hypothesis = no defensive value.
Proposed fix
Hunt program tracks hypothesis -> test -> outcome; quarterly review of unfinished hunts.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: MITRE ATT&CK; SANS hunting
LOWcanvasP35CNV-BUILT

Dashboard built from reports\canvas\20260920-162851\live-estate.json

Resource: reports/canvas/20260920-162851/dashboard.html
UNCLASSIFIED
Detector: CNV-001
Dashboard built from reports\canvas\20260920-162851\live-estate.json
Open the dashboard.
Proposed fix
n/a
Citation: TITAN CANVAS
LOWpredictP35PRD-36E1B288

Threat-hunting hypothesis logged but not tested

Resource: titan-proof-cui-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-012
Threat-hunting hypothesis logged but not tested
Threat hunting requires hypothesis-driven testing. Untested hypothesis = no defensive value.
Proposed fix
Hunt program tracks hypothesis -> test -> outcome; quarterly review of unfinished hunts.
Effort: 240 min (~$580 labour) · Expected annual loss: $8 · Blast radius: single resource
Citation: MITRE ATT&CK; SANS hunting
LOWpredictP35PRD-99EF06DC

Threat-hunting hypothesis logged but not tested

Resource: titan-proof-dev-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-012
Threat-hunting hypothesis logged but not tested
Threat hunting requires hypothesis-driven testing. Untested hypothesis = no defensive value.
Proposed fix
Hunt program tracks hypothesis -> test -> outcome; quarterly review of unfinished hunts.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: MITRE ATT&CK; SANS hunting
LOWpredictP35PRD-3D698B9E

Threat-hunting hypothesis logged but not tested

Resource: cloudtrail
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-012
Threat-hunting hypothesis logged but not tested
Threat hunting requires hypothesis-driven testing. Untested hypothesis = no defensive value.
Proposed fix
Hunt program tracks hypothesis -> test -> outcome; quarterly review of unfinished hunts.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: MITRE ATT&CK; SANS hunting
LOWpredictP35PRD-99EF06DC

Threat-hunting hypothesis logged but not tested

Resource: titan-proof-dev-0920160806
UNCLASSIFIED · 2026-09-20 21:28:58
Detector: PRD-012
Threat-hunting hypothesis logged but not tested
Threat hunting requires hypothesis-driven testing. Untested hypothesis = no defensive value.
Proposed fix
Hunt program tracks hypothesis -> test -> outcome; quarterly review of unfinished hunts.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: MITRE ATT&CK; SANS hunting
LOWpredictP35PRD-50773131

Predictive-maintenance / capacity signal not acted on

Resource: PRD-011-target
UNCLASSIFIED · 2026-09-20 21:29:16
Detector: PRD-011
Predictive-maintenance / capacity signal not acted on
Predictive signals (disk fill, memory leak, cert expiry) prevent outages only if acted on.
Proposed fix
Signal -> ticket -> SLA; backlog review weekly.
Effort: 240 min (~$580 labour) · Blast radius: \b(vm|instance|disk|nic|function|container)\b
Citation: ITIL Capacity Management
LOWpredictP35PRD-B1F23056

Threat-hunting hypothesis logged but not tested

Resource: PRD-012-target
UNCLASSIFIED · 2026-09-20 21:29:16
Detector: PRD-012
Threat-hunting hypothesis logged but not tested
Threat hunting requires hypothesis-driven testing. Untested hypothesis = no defensive value.
Proposed fix
Hunt program tracks hypothesis -> test -> outcome; quarterly review of unfinished hunts.
Effort: 240 min (~$580 labour) · Blast radius: single resource
Citation: MITRE ATT&CK; SANS hunting
TITAN AI — LAUNCH tier live proof — generated 2026-09-20  |  All 44 findings  |  titanaisec.com  | integrated