- Get Started with Outcomes Navigator
- Use Outcomes Navigator with the MITRE ATT&CK® Framework
- Use Outcomes Navigator with the Threat Detection, Investigation, and Response (TDIR) Use Case Categories Framework
- Use Outcomes Navigator for Compliance
- View Recommendations for Improving Your Configuration
- Share Information in Outcomes Navigator
- Outcomes Navigator Coverage Calculation
- The Role of Parsed Fields in Coverage Calculation
- Prerequisites for Calculating Coverage
- Types of Coverage Scores
- Use Case Coverage Score
- MITRE Coverage Score
- Compliance Framework Coverage Score
- Control Coverage Score
- Advanced Analytics Rules Coverage Calculation
- Correlation Rules Coverage Calculation
- Dashboards Coverage Calculation
- Coverage Over Time Calculation
- Outcomes Navigator Parser Calibration Tier Average Calculation
Change Product Parsing Action Status
Mark whether product parsing needs to be reviewed or has already been reviewed to streamline your recommendations and make them more relevant.
The Recommendations tab lists products with a low Parser Calibration Tier Average first so you prioritize investigating those products. After you investigate a product, mark the product as reviewed so you can focus on products you haven't investigated yet.
Navigate to the Recommendations tab for a given use case or MITRE ATT&CK® technique.[10]
Under Products should strive for Parser Calibration Tier Average 1, find the product for which you want to change the action status.
Click the More menu
, then select Mark as Reviewed or Mark for Review.Click Apply. If the action status is Reviewed, the product is removed from the list.
[10] MITRE ATT&CK and ATT&CK are trademarks of The MITRE Corporation ("MITRE"). Exabeam is not affiliated with or sponsored or endorsed by MITRE. Nothing herein is a representation of the views or opinions of MITRE or its personnel.