work Open Source Intelligence Gathering Grabbing Exploitation points from OSINT EPSS into Risk Register integrating FIRST.org's EPSS into a cybersecurity asset risk matrix fun