<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->
<!-- NERF is a trademark of defconxt. -->
# API Reference — Implementing Strategic Threat Briefings

## CISA KEV (for Landscape Data)

### Full Catalog
```bash
curl https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json | \
  jq '.vulnerabilities | length'
```

## FAIR Risk Model Parameters

| Parameter | Range | Description |
|-----------|-------|-------------|
| Threat Event Frequency | 0-1 per year | How often the threat contacts the asset |
| Vulnerability | 0-1 | Probability of successful exploitation |
| Primary Loss | USD | Direct response, replacement, productivity |
| Secondary Loss | USD | Fines, reputation, litigation |
| ALE | USD | Annualized Loss Expectancy = LEF × LM |

## Briefing Template Variables

```json
{
  "period": "Q1 2026",
  "bluf": "Bottom line assessment",
  "threats": [{"name": "...", "risk": "HIGH", "targeting": "...", "trend": "increasing"}],
  "risks": [{"threat": "...", "ale": "$2.5M", "confidence": "MODERATE"}],
  "recommendations": [{"action": "...", "impact": "...", "effort": "medium"}],
  "confidence": "MODERATE",
  "tlp": "TLP:AMBER"
}
```

## Intelligence Report Classification

| Audience | Report Type | Frequency |
|----------|------------|-----------|
| Board | Strategic assessment | Quarterly |
| CISO | Sector threat brief | Monthly |
| Security Ops | Tactical threat brief | Weekly |
| SOC | IOC bulletin | Daily |
