Detection Coverage
Detection-as-Code — every rule version-controlled, ATT&CK-mapped, and unit-tested against real adversary telemetry.
View source on GitHub →
15
detections
14
fixture-tested
15
pinned EVTX samples
16
ATT&CK techniques
7
tactics
All
15
Command & Control
1
Credential Access
4
Defense Evasion
5
Execution
4
Lateral Movement
1
Persistence
4
Privilege Escalation
3
