detection-coverage-review

What problem does it solve?

This Skill helps assess detection coverage against the MITRE ATT&CK matrix, identifying tactics and techniques that are covered, partially covered, or blind.

Core Features & Use Cases

• ATT&CK Coverage Analysis: Analyze which tactics/techniques are covered by detection rules.
• Data Source Inventory: Map existing detections to data sources.
• Threat Relevance Rating: Rate each technique based on data availability and threat relevance.
• Gap Identification: Identify gaps and plan for improvements.
• Use Case: For a SOC or program, use this Skill to find and prioritize detection gaps for enhanced security.

Quick Start

Run the detection coverage review skill to evaluate your current detection setup against the MITRE ATT&CK matrix.