Resume a layer, inspect high-gap tactics, map Sigma evidence and produce reports from one analyst launchpad.
Fetching STIX bundle...
Try a different search term
No reports yet. Create your first report.
Review SigmaHQ rules from triage to ATT&CK mapping, query translation, and deployable detection candidates.
Select a Sigma detection rule from the explorer feed to inspect details, check mapping coverages, and copy YAML rules.
Rules you've marked for future deployment. Click the bookmark icon on any rule card to add or remove it from your candidate list.
Browse the Sigma rules feed and click the bookmark icon on any rule to add it to your candidate list.
Archiving this query will mark it as inactive. It will still appear in historical reports but won't count toward active coverage.
This layer was created with a different version of the MITRE ATT&CK dataset. The Migration Wizard will compare both datasets, automatically map revoked or replaced techniques to their successors, and merge comments, scores, and draft queries.
Comparing ...
Analyzing dataset changes...