#
Heatmap
The Heatmap Dashboard pulls in visibility levels to convey the coverage level you have available for logging, detection, alerting, response, and prevention in a traditional MITRE ATT&CK heatmap format.
Below the visibility level coverage you can drill down to the associated tactics, techniques, and Procedures.
The coverage percentage for each technique displays as a percentage for each action. The higher the percentage, the more coverage you have.
The Heatmap is scoped to the selected detection category and is grouped by tactics, then techniques, then Procedures.
1. Select a category to see the heatmap for that coverage level. Alerted is selected in the example below.
2. Select a technique to display the breakdown of the detection categories for each Procedure (technique details) at the right of the page.
Each detection category shows a breakdown of the coverage for each status: None, Partial or Full.
Selecting a procedure's title displays the Workspace page with that procedure's details in focus.