### Area(s) _No response_ ### Propose new conventions I want to have support for capturing threats & vulnerabilities as described in ECS hence forming a security domain. At the same I should be able to see security scan info from my machines