ConceptsATT&CK Coverage Mapping

ATT&CK Coverage Mapping

Charting an organization's detections against the MITRE ATT&CK matrix to see which adversary techniques are covered, which are weakly covered, and which are blind spots, so detection effort can be focused.

Glossary definition

14 direct links2 lessons

Concept Neighborhood

Explore this concept’s connections in the groups below.

PrerequisiteRelated

Start here

MITRE ATT&CK

The foundation ATT&CK Coverage Mapping builds on, worth understanding first.

Open concept →

Prerequisitelearn this first

MITRE ATT&CKStart here

A knowledge base that organizes observed attacker tactics and techniques.

lessons

Relatedsorted by lesson coverage

Detection Backlog

lessons

Detection Metadata

lessons

Detection Strategy

lessons

Telemetry Mapping

lessons

Sub-Techniques

lessons

Tactic

lessons

Show 7 more connections

Technique

lessons

Atomic Tests

lessons

MITRE ATT&CK Framework

lessons

Detection Confidence Scoring

lesson

Heat Map

lesson

Threat-Informed Coverage

lesson

TTP Mapping

lesson

Related Lessons

2 lessons cover this concept

Detection Coverage Analysis

SOC Analyst

Designing a Detection Program with SIEM Queries

SOC Analyst