MITRE ATT&CK Coverage Matrix
Live coverage of MITRE ATT&CK tactics and techniques against the Zedmos CTI catalog. Every shipped IOC is mapped to one or more techniques by the scoring pipeline. Click a technique tile to open its ATT&CK page.
Data source: /v1/public/mitre/coverage · ATT&CK Enterprise v15 · Cached 5 min · Generated — · loading…
Tactics — IOC coverage by kill-chain phase
Top techniques (by IOC count)
| Technique | Tactics | IOCs | Verified | Trusted | Community | Top categories |
|---|---|---|---|---|---|---|
| loading… | ||||||
Coverage by Zedmos category
| Category | IOCs | Tactics | Techniques |
|---|---|---|---|
| loading… | |||
Want technique-level IOCs in your stack?
Issue a Bearer token from your /dashboard and call:
curl -H "authorization: Bearer $TOKEN" \
https://cti.zedmos.net/v1/feeds/security/phishing/sigma.ymlEach Sigma rule carries the MITRE technique tags shown above. See Developer Guide → MITRE.