QUESTION

Why is a MITRE technique status in Panther displaying as green with a dot in the middle (Partially Covered)?

ANSWER

The MITRE technique statuses are considered Partially Covered when there is at least 1 mapped detection. Panther defaults to Partially Covered, as every organization's security standards differ on whether they are partially or fully covered in different tactics and techniques.

To change the status:

Hover over the status then select Covered.