{"slug":"mapping-mitre-attack-techniques","source_name":"mapping-mitre-attack-techniques","name":"Mapping Mitre Attack Techniques","description":"Maps observed adversary behaviors, security alerts, and detection rules to MITRE ATT&CK techniques and sub-techniques to quantify detection coverage and guide control prioritization. Use when building an ATT&CK-based coverage heatmap, tagging SIEM alerts with technique IDs, aligning security controls to adversary playbooks, or reporting threat exposure to executives. Activates for requests involving ATT&CK Navigator, Sigma rules, MITRE D3FEND, or coverage gap analysis.","version":1,"lift":{"pass_rate_delta_pts":27.27,"pass_rate_pct":31.8,"total_cases":22,"passed_cases":7,"tokens_delta_pct":44.9,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T10:20:09.402105+00:00"},"skill_score":0.3182,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":27.27,"with_pass_pct":31.8,"without_pass_pct":4.5,"tokens_delta_pct":44.9,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-07-28T10:20:09.402105+00:00","run_id":"bb2f3e56-eecb-410a-919a-1f9729fa2ec5","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"25161ed6f8131b4203d7b721b977acdd554ad85388370979bba19632aaf2198d","raw_url":"https://app.decimal.ai/s/mapping-mitre-attack-techniques/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/mapping-mitre-attack-techniques"}