{
  "name": "Detection-Rules Coverage",
  "versions": {
    "layer": "4.5",
    "navigator": "5.0",
    "attack": "16"
  },
  "domain": "enterprise-attack",
  "description": "MITRE ATT&CK coverage auto-generated from wahidhendrawan/Detection-Rules",
  "filters": {
    "platforms": [
      "Linux",
      "Windows",
      "macOS",
      "Network",
      "Cloud"
    ]
  },
  "sorting": 3,
  "layout": {
    "layout": "side",
    "showName": true,
    "showID": false
  },
  "hideDisabled": false,
  "techniques": [
    {
      "techniqueID": "T1003",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1003.001",
      "score": 5,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sentinelone, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1003.002",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1003.003",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1003.008",
      "score": 3,
      "comment": "Covered by: sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1005",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1012",
      "score": 3,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1016",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1021",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1021.001",
      "score": 4,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1021.002",
      "score": 3,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1021.004",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1027",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1029",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1033",
      "score": 2,
      "comment": "Covered by: sigma, splunk",
      "enabled": true
    },
    {
      "techniqueID": "T1036",
      "score": 4,
      "comment": "Covered by: carbonblack, elastic, microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1041",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1046",
      "score": 2,
      "comment": "Covered by: sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1047",
      "score": 6,
      "comment": "Covered by: carbonblack, elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1048",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1053",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1053.002",
      "score": 3,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1053.003",
      "score": 3,
      "comment": "Covered by: sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1053.005",
      "score": 4,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1055",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1055.012",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1056",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1056.001",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1059",
      "score": 6,
      "comment": "Covered by: carbonblack, elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1059.001",
      "score": 7,
      "comment": "Covered by: carbonblack, elastic, falcon, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1059.003",
      "score": 5,
      "comment": "Covered by: carbonblack, elastic, microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1059.004",
      "score": 4,
      "comment": "Covered by: elastic, falco, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1059.005",
      "score": 3,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1059.006",
      "score": 5,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1059.007",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1068",
      "score": 3,
      "comment": "Covered by: elastic, sigma, splunk",
      "enabled": true
    },
    {
      "techniqueID": "T1070",
      "score": 4,
      "comment": "Covered by: elastic, microsoft-sentinel, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1070.001",
      "score": 3,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1070.003",
      "score": 2,
      "comment": "Covered by: sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1070.006",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1071",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1071.001",
      "score": 5,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1071.002",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1071.004",
      "score": 6,
      "comment": "Covered by: carbonblack, elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1072",
      "score": 3,
      "comment": "Covered by: elastic, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1078",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1078.003",
      "score": 2,
      "comment": "Covered by: sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1078.004",
      "score": 3,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1082",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1087",
      "score": 5,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1087.001",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1087.002",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1090",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1090.003",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1095",
      "score": 5,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1098",
      "score": 5,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1098.001",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1098.003",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1098.004",
      "score": 2,
      "comment": "Covered by: sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1098.007",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1105",
      "score": 7,
      "comment": "Covered by: carbonblack, elastic, falcon, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1110",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1110.001",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1112",
      "score": 4,
      "comment": "Covered by: carbonblack, elastic, microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1124",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1127",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1127.001",
      "score": 5,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1133",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1136",
      "score": 3,
      "comment": "Covered by: carbonblack, microsoft-sentinel, splunk",
      "enabled": true
    },
    {
      "techniqueID": "T1136.001",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1136.002",
      "score": 2,
      "comment": "Covered by: sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1136.003",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1140",
      "score": 3,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1190",
      "score": 3,
      "comment": "Covered by: elastic, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1197",
      "score": 4,
      "comment": "Covered by: carbonblack, elastic, microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1205",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1205.002",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1218",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, splunk",
      "enabled": true
    },
    {
      "techniqueID": "T1218.004",
      "score": 5,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1218.005",
      "score": 3,
      "comment": "Covered by: carbonblack, sigma, splunk",
      "enabled": true
    },
    {
      "techniqueID": "T1218.010",
      "score": 4,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma, splunk",
      "enabled": true
    },
    {
      "techniqueID": "T1218.011",
      "score": 4,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma, splunk",
      "enabled": true
    },
    {
      "techniqueID": "T1219",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1484",
      "score": 1,
      "comment": "Covered by: microsoft-sentinel",
      "enabled": true
    },
    {
      "techniqueID": "T1484.001",
      "score": 2,
      "comment": "Covered by: sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1486",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1489",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1490",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sentinelone, sigma, splunk",
      "enabled": true
    },
    {
      "techniqueID": "T1497",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1497.001",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1497.002",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1497.003",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1499",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1505",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1505.003",
      "score": 3,
      "comment": "Covered by: elastic, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1530",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1531",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1543",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1543.003",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1547",
      "score": 1,
      "comment": "Covered by: microsoft-sentinel",
      "enabled": true
    },
    {
      "techniqueID": "T1547.001",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1547.005",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1547.006",
      "score": 2,
      "comment": "Covered by: sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1548",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1548.002",
      "score": 3,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1548.003",
      "score": 2,
      "comment": "Covered by: sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1552",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1552.001",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1556",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1556.006",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1560",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1560.001",
      "score": 5,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1562",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1562.001",
      "score": 5,
      "comment": "Covered by: elastic, microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1562.002",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1562.004",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1562.008",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1564",
      "score": 1,
      "comment": "Covered by: microsoft-sentinel",
      "enabled": true
    },
    {
      "techniqueID": "T1564.001",
      "score": 2,
      "comment": "Covered by: sigma, splunk",
      "enabled": true
    },
    {
      "techniqueID": "T1565",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1565.001",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1566",
      "score": 1,
      "comment": "Covered by: elastic",
      "enabled": true
    },
    {
      "techniqueID": "T1566.001",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1566.002",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1567",
      "score": 1,
      "comment": "Covered by: elastic",
      "enabled": true
    },
    {
      "techniqueID": "T1567.002",
      "score": 2,
      "comment": "Covered by: carbonblack, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1569",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1569.002",
      "score": 2,
      "comment": "Covered by: sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1571",
      "score": 3,
      "comment": "Covered by: microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1572",
      "score": 4,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1574",
      "score": 1,
      "comment": "Covered by: elastic",
      "enabled": true
    },
    {
      "techniqueID": "T1574.001",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1574.002",
      "score": 3,
      "comment": "Covered by: carbonblack, microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1578",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1578.002",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1578.003",
      "score": 2,
      "comment": "Covered by: microsoft-sentinel, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1586",
      "score": 1,
      "comment": "Covered by: sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1586.001",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1586.002",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1586.003",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1589",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1590",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1591",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1592",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1593",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1594",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1596",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1597",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1598",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1611",
      "score": 2,
      "comment": "Covered by: falco, sigma",
      "enabled": true
    },
    {
      "techniqueID": "T1621",
      "score": 4,
      "comment": "Covered by: microsoft-sentinel, sigma, splunk, wazuh",
      "enabled": true
    },
    {
      "techniqueID": "T1650",
      "score": 2,
      "comment": "Covered by: elastic, sigma",
      "enabled": true
    }
  ],
  "gradient": {
    "colors": [
      "#ffe6e6",
      "#ff6666",
      "#990000"
    ],
    "minValue": 1,
    "maxValue": 6
  },
  "showTacticRowBackground": false,
  "selectTechniquesAcrossTactics": true
}