Coverage, scenarios and tests

Coverage maps your use cases to MITRE ATT&CK. Each square is a technique: mapped (a rule claims it), validated (the rule works and has data) or tested (a test proved it).

Coverage by tactic, the weakest tactics and the biggest gaps in real attacks.

One technique, the use cases and logs behind it, and what would raise its coverage.

Scenarios follow a complete attack step by step. A chain fails at its weakest step, so one blind spot can undo strong coverage elsewhere.

Five attack scenarios, each with its readiness score.

Ransomware, step by step, with the blind spots and what to do about each.

Tests records proof that use cases fire: dry runs, replays and attack simulations, and which tests have aged out.

Tests: what is proven, and the record of each run.