Coverage Heatmap

CloudSigma tracks which MITRE ATT&CK techniques you have detection rules for and displays them as a coverage heatmap.

Viewing Coverage

Access the coverage heatmap at cloudsigma.a13e.com/coverage . The heatmap shows:

• Covered techniques — Highlighted cells showing techniques you have rules for
• Rule count — How many rules cover each technique
• Platform breakdown — Which platforms each technique is covered on
• Last generated — When rules were most recently generated for each technique

Coverage via API

Retrieve your coverage data programmatically:

curl https://cloudsigma.a13e.com/v1/coverage \
  -H "Authorization: Bearer YOUR_API_KEY"

See the Coverage API reference for the full response schema.

Improving Coverage

To increase your ATT&CK coverage:

1. Submit diverse threat intel — Different advisories cover different techniques
2. Target specific platforms — Focus on the platforms in your environment
3. Use text input for gaps — Describe specific techniques you need coverage for

Coverage Tiers