- Get Started with Outcomes Navigator
- Use Outcomes Navigator from a MITRE ATT&CK® Perspective
- Use Outcomes Navigator from a Threat Detection, Investigation, and Response (TDIR) Use Case Categories Perspective
- View Recommendations for Improving Your Configuration
- Share Information in Outcomes Navigator
- Outcomes Navigator Coverage Calculation
- Outcomes Navigator Parser Calibration Tier Average Calculation
Coverage Over Time Calculation
Learn how Outcomes Navigator creates the Coverage Over Time chart on the Organizational Coverage tab.
The Coverage Over Time chart depicts the Use Case Coverage Score or MITRE Coverage Score for a given use case or MITRE ATT&CK® technique over the past six months. Each bar of the chart represents the average Use Case Coverage Score or MITRE Coverage Score for each month.[18]
To get the monthly average, Outcomes Navigator calculates the Use Case Coverage Score or MITRE Coverage Score for each use case or ATT&CK technique once per day. First, Outcomes Navigator checks if it has started calculating the average Use Case Coverage Score or MITRE Coverage Scorefor the month. If not, Outcomes Navigator starts a new calculation for the month. If it has already started a calculation, Outcomes Navigator updates the existing calculation.
The monthly average Use Case Coverage Score or MITRE Coverage Score is calculated by:
where A is the monthly average, M is the existing sum of Use Case Coverage Scores or MITRE Coverage Scores calculated during the month, D is the new Use Case Coverage Score or MITRE Coverage Score calculated that day, and N is the number of times the Use Case Coverage Score or MITRE Coverage Score was calculated that month. If Outcomes Navigator is starting a new calculation for the month, M is zero.
[18] MITRE ATT&CK and ATT&CK are trademarks of The MITRE Corporation ("MITRE"). Exabeam is not affiliated with or sponsored or endorsed by MITRE. Nothing herein is a representation of the views or opinions of MITRE or its personnel.