BBreachForge
Public coverage matrix

ATT&CK, across the kill chain

The MITRE ATT&CK techniques laid out stage by stage along the attack lifecycle, from initial access to impact. Each one shows whether a detection rule in the BreachForge library covers it, or whether it is a gap. This is the plain global view. Signed in, the same matrix is scored against your estate, so the states become prevented, detected, missed and untested for your own controls.

11Lifecycle stages
38Techniques mapped
0Covered by a rule
0%Library coverage
Covered, a detection rule exists Gap, no rule in the library yet
Laying out the matrix...

Score this coverage against your estate

The public matrix shows library coverage for everyone. Inside BreachForge, the same techniques are scored against your own controls, so each one reads prevented, detected, missed or untested, and you see which gaps sit on a path to a crown jewel.

Open the console Browse the rules