Skip to main content

Outcomes NavigatorOutcomes Navigator Guide

Understand Your Overall MITRE ATT&CK® Coverage

To create a strategy for configuring your environment, get an overview of your overall MITRE ATT&CK® coverage in Outcomes Navigator.

Under the MITRE ATT&CK® Coverage tab, view a summary of your ATT&CK coverage and explore all ATT&CK techniques and their MITRE Coverage Scores.[4]

The MITRE ATT&CK Coverage tab in Outcomes Navigator.

Use this information to evaluate your overall security posture, which ATT&CK techniques are important to you, and what techniques you should focus on to achieve your goals.

Summarize Your ATT&CK Coverage

Understand your overall ATT&CK coverage at a glance using the overall MITRE ATT&CK Coverage Score.

outcomesnavigator-mitreattackcoverage-mitreattackcoveragescore.png

1 View your current overall MITRE Coverage Score. The overall MITRE ATT&CK Coverage Score is an average of the MITRE Coverage Scores across all techniques. The overall MITRE ATT&CK Covereage Score is calculated once per day.

2 The overall MITRE ATT&CK Coverage Score is calculated once per day. View the date and time it was last calculated.

3 View the relative change in the overall MITRE ATT&CK Coverage Score since the last time the score was calculated.

4 To identify trends in the overall MITRE ATT&CK Coverage Score, you can view a bar chart depicting the overall coverage score over a period you specify: one month, three months, or six months.

If you toggle the chart to depict the overall MITRE ATT&CK Coverage Score over three months or six months, each bar represents the average overall MITRE ATT&CK Coverage Score in a given month. If you toggle the chart to depict the overall MITRE ATT&CK Coverage Score over one month, each bar represents the average overall MITRE ATT&CK Coverage Score in a given week.

5 View the relative change in the overall MITRE ATT&CK Coverage Score over the given period.

The Exabeam Nova MITRE ATT&CK Coverage Summary is an AI-generated summary of your overall use case coverage. It is under development and will be delivered in the coming month.

Explore ATT&CK Techniques by Coverage

To identify specific techniques of concern, view all techniques organized by tactic and the MITRE Coverage Score for each use case.

Matrix of all MITRE ATT&CK techniques organized by tacti under the Explore Exabeam Content Through These Portals MITRE ATT&CK Coverage tab.

For example, if your organization is concerned about Persistence and you want to improve your protection against that ATT&CK tactic, you might focus only on aligning your environment to the techniques under that use case category. If you want to get the most from Exabeam and maximize your protection, you should aim to protect against every technique you see.

To learn about what a specific technique is and get a summary of how well your environment protects against the technique, hover over the use case.

The details of the the Account Manipulation MITRE ATT&CK® technique that appear when you hover over the Account Manipulation ATT&CK technique in the Explore Exabeam Content Through These Portals MITRE ATT&CK Coverage tab.

To view more details about your coverage of the technique, click See Details. You're directed to the View Outcomes by MITRE ATT&CK® Tactics and Techniques > Organizational Coverage tab, where you can drill down into the configuration of your environment and how well it protects against the specific technique.



[4] MITRE ATT&CK and ATT&CK are trademarks of The MITRE Corporation ("MITRE"). Exabeam is not affiliated with or sponsored or endorsed by MITRE. Nothing herein is a representation of the views or opinions of MITRE or its personnel.