detection-coverage-analysis

What problem does it solve?

This Skill helps security teams understand their existing detection coverage against known adversary techniques and identify gaps.

Core Features & Use Cases

• Coverage Statistics: Get percentage-based coverage metrics for different MITRE ATT&CK tactics.
• Gap Identification: Pinpoint specific techniques or threat profiles (like ransomware or APTs) that lack adequate detection.
• Detection Suggestions: Receive recommendations for new detections based on missing coverage or required data sources.
• Navigator Layer Generation: Create importable MITRE ATT&CK Navigator layers directly from your detection rules.

Quick Start

Use the detection-coverage-analysis skill to get coverage stats for elastic detections.