cernity. Get started
CERNITY / DETECTION CATALOG

Detection coverage,
from the manifest.

Detector status and ATT&CK mappings come from the generated detection catalog. Coverage in your deployment depends on sensor inputs and configuration.

Read the coverage boundaries →

experimental identifies experimental work, not a shipped guarantee. shipped does not imply end-to-end verification. verified_e2e identifies manifest-declared end-to-end verification, not a guarantee for every deployment. Roadmap capabilities are not available yet.

This payload declares input records but does not specify evidence produced. Inputs are listed separately; no output evidence is inferred.

10 detectors from the generated manifest payload. ATT&CK mappings do not guarantee detection of every instance of a technique.
DetectorStatusATT&CK techniquesEvidence producedInput records
anomaly-detector shipped None declared Not specified in manifest payload
  • ndr.observation.normalized.v1
  • suricata.anomaly.v1
behavioral-detectors shipped
  • T1071
  • T1071.004
 Not specified in manifest payload
  • suricata.dns.v1
  • suricata.flow.v1
coverage-detector shipped None declared Not specified in manifest payload
  • suricata.stats.v1
dns-detector shipped
  • T1071
 Not specified in manifest payload
  • suricata.dns.v1
east-west-detectors shipped
  • T1021
  • T1021.002
  • T1046
  • T1110.003
  • T1486
  • T1557.001
  • T1558.003
  • T1558.004
 Not specified in manifest payload
  • suricata.dns.v1
  • suricata.flow.v1
  • suricata.raw.v1
http-detector shipped
  • T1071
  • T1110
 Not specified in manifest payload
  • suricata.http.v1
ids-alerts shipped
  • T1021
  • T1046
  • T1071
 Not specified in manifest payload
  • suricata.raw.v1
ot-detectors shipped
  • T0831
  • T0842
  • T0843
  • T0846
  • T0855
  • T0858
  • T0859
  • T0885
 Not specified in manifest payload
  • suricata.modbus.v1
protocol-detectors shipped
  • T1071
  • T1090.004
  • T1110
  • T1571
 Not specified in manifest payload
  • suricata.flow.v1
  • suricata.http.v1
  • suricata.raw.v1
  • suricata.ssh.v1
  • suricata.tls.v1
threat-intel shipped
  • T1071
 Not specified in manifest payload
  • suricata.dns.v1
  • suricata.file.v1
  • suricata.flow.v1
  • suricata.http.v1
  • suricata.tls.v1