Detections coverage of ATT&CK documentation

Elastic Security
2

Hey there @probson :wave:

Thanks to the recent efforts of @Thorben there is the new Elastic Security: Detection Rules ATT&CK Navigator layer generator that you can use to generate an ATT&CK Navigator to better understand the coverage of your own rulesets. :tada:

Here's an example navigator detailing the coverage of the prebuilt Elastic Detection Rules shipped with the app:

image
image3608×2780 1.7 MB

This should cover exactly what you're looking for, but if you have any trouble/feedback please do feel free to add it to this thread (or open an issue in that repo). :slightly_smiling_face:

Hope this helps -- cheers!
Garrett

3 Likes