- Get Started with Outcomes Navigator
- Use Outcomes Navigator with the MITRE ATT&CK® Framework
- Use Outcomes Navigator with the Threat Detection, Investigation, and Response (TDIR) Use Case Categories Framework
- Use Outcomes Navigator for Compliance
- View Recommendations for Improving Your Configuration
- Share Information in Outcomes Navigator
- Outcomes Navigator Coverage Calculation
- The Role of Parsed Fields in Coverage Calculation
- Prerequisites for Calculating Coverage
- Types of Coverage Scores
- Use Case Coverage Score
- MITRE Coverage Score
- Compliance Framework Coverage Score
- Control Coverage Score
- Advanced Analytics Rules Coverage Calculation
- Correlation Rules Coverage Calculation
- Dashboards Coverage Calculation
- Coverage Over Time Calculation
- Outcomes Navigator Parser Calibration Tier Average Calculation
Control Coverage Score
Quickly understand the efficacy of your configuration in meeting the requirements of a specific compliance control.
The coverage score of a compliance control is a metric of how well your environment is configured to meet the requirements of a specific control of a compliance framework.
The coverage score for a given compliance control is a weighted average of coverage scores across all Exabeam applications and features Outcomes Navigator assesses, including Advanced Analytics rules, correlation rules, analytics rules, and Dashboards.
Weight Calculation
The weight of each Exabeam application or feature is determined by the count of Exabeam features. The weight of a given Exabeam application or feature is calculated by:
where W is the weight of a given Exabeam application or feature; N is the number of the Exabeam feature in question, for example, 50 analytics rules or 25 dashboards; and T is the total number of Exabeam features across all Exabeam applications.
Average Calculation
The average is calculated by:
where A is the average; SA, SB, and SC are the coverage scores of Exabeam applications or features A, B, and C, respectively, for a given compliance control; and WA, WB, and WC are the weights of Exabeam applications or features A, B, and C, respectively.
Improve Your Control Coverage Score
Because the Control Coverage Score is based on amount and quality of data, the best way to improve your score is to configure a wider variety of relevant products and ensure the values in the logs from those products are fully extracted.