The Attack Surface Management module creates findings and issues based on the following types of detections:Attack surface rulesExternally inferred CVEs