Skip to main content
Panther Knowledge Base

Why are the MITRE technique statuses "Partially Covered" in Panther?

QUESTION

Why is a MITRE technique status in Panther displaying as green with a dot in the middle (Partially Covered)?

Screenshot 2024-02-01 at 11.37.33 AM.png

ANSWER

The MITRE technique statuses are considered Partially Covered when there is at least 1 mapped detection. Panther defaults to Partially Covered, as every organization's security standards differ on whether they are partially or fully covered in different tactics and techniques.

To change the status:

Hover over the status then select Covered. 
Screenshot 2024-02-02 at 4.31.22 PM.png