{
  "name": "Sigma Rule Library coverage",
  "versions": {
    "attack": "19.2",
    "navigator": "5.1.0",
    "layer": "4.5"
  },
  "domain": "enterprise-attack",
  "description": "Number of Sigma rules per ATT&CK technique, from SigmaHQ/sigma@da9bb07d642a (synced 2026-08-19). Generated by https://cerez23.github.io/sigma-rule-library/",
  "sorting": 3,
  "layout": {
    "layout": "side",
    "showID": true,
    "showName": true
  },
  "hideDisabled": false,
  "techniques": [
    {
      "techniqueID": "T1001",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1001.003",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1003",
      "score": 150,
      "comment": "150 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1003.001",
      "score": 79,
      "comment": "79 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1003.002",
      "score": 28,
      "comment": "28 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1003.003",
      "score": 24,
      "comment": "24 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1003.004",
      "score": 12,
      "comment": "12 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1003.005",
      "score": 8,
      "comment": "8 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1003.006",
      "score": 7,
      "comment": "7 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1005",
      "score": 14,
      "comment": "14 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1006",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1007",
      "score": 11,
      "comment": "11 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1008",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1010",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1012",
      "score": 14,
      "comment": "14 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1014",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1016",
      "score": 12,
      "comment": "12 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1018",
      "score": 17,
      "comment": "17 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1020",
      "score": 10,
      "comment": "10 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1021",
      "score": 92,
      "comment": "92 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1021.001",
      "score": 16,
      "comment": "16 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1021.002",
      "score": 38,
      "comment": "38 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1021.003",
      "score": 13,
      "comment": "13 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1021.004",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1021.005",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1021.006",
      "score": 11,
      "comment": "11 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1021.007",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1027",
      "score": 125,
      "comment": "125 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1027.001",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1027.002",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1027.003",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1027.004",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1027.005",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1027.009",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1027.010",
      "score": 10,
      "comment": "10 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1027.011",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1030",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1033",
      "score": 30,
      "comment": "30 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1036",
      "score": 94,
      "comment": "94 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1036.002",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1036.003",
      "score": 27,
      "comment": "27 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1036.004",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1036.005",
      "score": 21,
      "comment": "21 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1036.006",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1036.007",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1036.008",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1037",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1037.001",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1037.005",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1039",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1040",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1041",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1046",
      "score": 20,
      "comment": "20 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1047",
      "score": 52,
      "comment": "52 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1048",
      "score": 22,
      "comment": "22 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1048.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1048.003",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1049",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1053",
      "score": 72,
      "comment": "72 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1053.002",
      "score": 8,
      "comment": "8 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1053.003",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1053.005",
      "score": 51,
      "comment": "51 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1055",
      "score": 54,
      "comment": "54 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1055.001",
      "score": 8,
      "comment": "8 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1055.003",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1055.009",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1055.011",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1055.012",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1056",
      "score": 8,
      "comment": "8 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1056.001",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1056.002",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1057",
      "score": 8,
      "comment": "8 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1059",
      "score": 424,
      "comment": "424 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1059.001",
      "score": 220,
      "comment": "220 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1059.002",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1059.003",
      "score": 46,
      "comment": "46 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1059.004",
      "score": 18,
      "comment": "18 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1059.005",
      "score": 29,
      "comment": "29 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1059.006",
      "score": 13,
      "comment": "13 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1059.007",
      "score": 29,
      "comment": "29 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1059.009",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1059.012",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1068",
      "score": 31,
      "comment": "31 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1069",
      "score": 26,
      "comment": "26 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1069.001",
      "score": 16,
      "comment": "16 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1069.002",
      "score": 15,
      "comment": "15 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1069.003",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1070",
      "score": 55,
      "comment": "55 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1070.003",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1070.004",
      "score": 15,
      "comment": "15 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1070.005",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1070.006",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1070.008",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1071",
      "score": 65,
      "comment": "65 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1071.001",
      "score": 42,
      "comment": "42 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1071.004",
      "score": 17,
      "comment": "17 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1072",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1074",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1074.001",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1078",
      "score": 107,
      "comment": "107 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1078.001",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1078.002",
      "score": 7,
      "comment": "7 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1078.003",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1078.004",
      "score": 41,
      "comment": "41 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1082",
      "score": 33,
      "comment": "33 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1083",
      "score": 24,
      "comment": "24 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1087",
      "score": 41,
      "comment": "41 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1087.001",
      "score": 13,
      "comment": "13 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1087.002",
      "score": 21,
      "comment": "21 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1087.004",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1090",
      "score": 33,
      "comment": "33 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1090.001",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1090.002",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1090.003",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1090.004",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1091",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1095",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1098",
      "score": 44,
      "comment": "44 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1098.001",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1098.003",
      "score": 7,
      "comment": "7 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1098.005",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1102",
      "score": 19,
      "comment": "19 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1102.001",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1102.002",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1102.003",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1105",
      "score": 87,
      "comment": "87 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1106",
      "score": 14,
      "comment": "14 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1110",
      "score": 28,
      "comment": "28 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1110.001",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1110.002",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1112",
      "score": 96,
      "comment": "96 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1113",
      "score": 10,
      "comment": "10 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1114",
      "score": 11,
      "comment": "11 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1114.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1114.003",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1115",
      "score": 8,
      "comment": "8 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1119",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1120",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1123",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1124",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1125",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1127",
      "score": 21,
      "comment": "21 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1127.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1129",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1132",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1132.001",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1133",
      "score": 20,
      "comment": "20 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1134",
      "score": 18,
      "comment": "18 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1134.001",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1134.002",
      "score": 7,
      "comment": "7 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1134.003",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1134.004",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1134.005",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1135",
      "score": 7,
      "comment": "7 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1136",
      "score": 26,
      "comment": "26 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1136.001",
      "score": 18,
      "comment": "18 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1136.002",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1136.003",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1137",
      "score": 16,
      "comment": "16 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1137.002",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1137.003",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1137.006",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1140",
      "score": 18,
      "comment": "18 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1176",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1176.001",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1185",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1187",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1189",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1190",
      "score": 149,
      "comment": "149 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1195",
      "score": 19,
      "comment": "19 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1195.001",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1195.002",
      "score": 17,
      "comment": "17 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1197",
      "score": 16,
      "comment": "16 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1199",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1200",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1201",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1202",
      "score": 40,
      "comment": "40 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1203",
      "score": 35,
      "comment": "35 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1204",
      "score": 57,
      "comment": "57 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1204.001",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1204.002",
      "score": 39,
      "comment": "39 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1204.004",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1207",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1210",
      "score": 15,
      "comment": "15 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1211",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1212",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1213",
      "score": 12,
      "comment": "12 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1213.003",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1216",
      "score": 15,
      "comment": "15 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1216.001",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1217",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1218",
      "score": 255,
      "comment": "255 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1218.001",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1218.002",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1218.003",
      "score": 7,
      "comment": "7 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1218.005",
      "score": 8,
      "comment": "8 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1218.007",
      "score": 10,
      "comment": "10 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1218.008",
      "score": 8,
      "comment": "8 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1218.009",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1218.010",
      "score": 19,
      "comment": "19 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1218.011",
      "score": 43,
      "comment": "43 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1218.013",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1218.014",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1219",
      "score": 52,
      "comment": "52 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1219.002",
      "score": 46,
      "comment": "46 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1220",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1221",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1222",
      "score": 11,
      "comment": "11 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1222.001",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1222.002",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1482",
      "score": 17,
      "comment": "17 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1484",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1484.001",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1484.002",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1485",
      "score": 20,
      "comment": "20 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1486",
      "score": 16,
      "comment": "16 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1489",
      "score": 20,
      "comment": "20 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1490",
      "score": 27,
      "comment": "27 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1491",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1491.001",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1495",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1496",
      "score": 13,
      "comment": "13 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1497",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1497.001",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1498",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1499",
      "score": 7,
      "comment": "7 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1499.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1499.004",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1505",
      "score": 47,
      "comment": "47 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1505.001",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1505.002",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1505.003",
      "score": 35,
      "comment": "35 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1505.004",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1505.005",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1518",
      "score": 13,
      "comment": "13 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1518.001",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1525",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1526",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1528",
      "score": 14,
      "comment": "14 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1529",
      "score": 8,
      "comment": "8 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1531",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1537",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1539",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1542",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1542.001",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1542.003",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1543",
      "score": 63,
      "comment": "63 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1543.001",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1543.002",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1543.003",
      "score": 47,
      "comment": "47 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1543.004",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1546",
      "score": 64,
      "comment": "64 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1546.001",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1546.002",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1546.003",
      "score": 12,
      "comment": "12 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1546.004",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1546.007",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1546.008",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1546.009",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1546.010",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1546.011",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1546.012",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1546.013",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1546.014",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1546.015",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1547",
      "score": 63,
      "comment": "63 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1547.001",
      "score": 39,
      "comment": "39 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1547.002",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1547.003",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1547.004",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1547.005",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1547.006",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1547.008",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1547.009",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1547.010",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1547.014",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1547.015",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1548",
      "score": 85,
      "comment": "85 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1548.001",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1548.002",
      "score": 56,
      "comment": "56 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1548.003",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1550",
      "score": 19,
      "comment": "19 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1550.001",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1550.002",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1550.003",
      "score": 7,
      "comment": "7 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1552",
      "score": 56,
      "comment": "56 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1552.001",
      "score": 24,
      "comment": "24 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1552.002",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1552.003",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1552.004",
      "score": 7,
      "comment": "7 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1552.006",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1552.007",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1553",
      "score": 24,
      "comment": "24 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1553.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1553.002",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1553.003",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1553.004",
      "score": 10,
      "comment": "10 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1553.005",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1554",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1555",
      "score": 20,
      "comment": "20 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1555.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1555.003",
      "score": 8,
      "comment": "8 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1555.004",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1555.005",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1556",
      "score": 19,
      "comment": "19 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1556.002",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1556.004",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1556.006",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1557",
      "score": 21,
      "comment": "21 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1557.001",
      "score": 10,
      "comment": "10 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1557.003",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1558",
      "score": 26,
      "comment": "26 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1558.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1558.002",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1558.003",
      "score": 18,
      "comment": "18 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1559",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1559.001",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1559.002",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1560",
      "score": 19,
      "comment": "19 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1560.001",
      "score": 17,
      "comment": "17 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1561",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1561.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1561.002",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1563",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1563.002",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1564",
      "score": 59,
      "comment": "59 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1564.001",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1564.002",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1564.003",
      "score": 8,
      "comment": "8 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1564.004",
      "score": 23,
      "comment": "23 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1564.006",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1564.008",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1565",
      "score": 11,
      "comment": "11 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1565.001",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1565.002",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1566",
      "score": 35,
      "comment": "35 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1566.001",
      "score": 24,
      "comment": "24 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1566.002",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1567",
      "score": 28,
      "comment": "28 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1567.001",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1567.002",
      "score": 14,
      "comment": "14 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1568",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1568.002",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1569",
      "score": 48,
      "comment": "48 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1569.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1569.002",
      "score": 43,
      "comment": "43 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1570",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1571",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1572",
      "score": 24,
      "comment": "24 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1573",
      "score": 6,
      "comment": "6 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1574",
      "score": 121,
      "comment": "121 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1574.001",
      "score": 93,
      "comment": "93 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1574.005",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1574.006",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1574.007",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1574.008",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1574.011",
      "score": 11,
      "comment": "11 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1574.012",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1578",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1578.003",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1580",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1584",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1586",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1586.003",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1587",
      "score": 17,
      "comment": "17 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1587.001",
      "score": 11,
      "comment": "11 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1588",
      "score": 12,
      "comment": "12 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1588.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1588.002",
      "score": 9,
      "comment": "9 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1589",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1589.002",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1590",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1590.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1590.002",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1591",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1591.004",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1592",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1592.004",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1593",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1593.003",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1595",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1595.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1595.002",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1598",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1598.002",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1599",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1599.001",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1606",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1608",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1608.003",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1609",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1611",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1613",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1614",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1614.001",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1615",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1619",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1620",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1621",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1622",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1649",
      "score": 11,
      "comment": "11 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1653",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1685",
      "score": 202,
      "comment": "202 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1685.001",
      "score": 28,
      "comment": "28 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1685.002",
      "score": 3,
      "comment": "3 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1685.004",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1685.005",
      "score": 8,
      "comment": "8 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1685.006",
      "score": 4,
      "comment": "4 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1686",
      "score": 34,
      "comment": "34 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1686.001",
      "score": 5,
      "comment": "5 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1686.002",
      "score": 2,
      "comment": "2 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1686.003",
      "score": 20,
      "comment": "20 Sigma rules in the catalog"
    },
    {
      "techniqueID": "T1689",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    },
    {
      "techniqueID": "T1690",
      "score": 1,
      "comment": "1 Sigma rule in the catalog"
    }
  ],
  "gradient": {
    "colors": [
      "#f4f4f5",
      "#99f6e4",
      "#0f766e"
    ],
    "minValue": 0,
    "maxValue": 424
  },
  "metadata": [
    {
      "name": "source",
      "value": "https://github.com/SigmaHQ/sigma"
    },
    {
      "name": "commit",
      "value": "da9bb07d642a2826e89702445d32c795209ec108"
    },
    {
      "name": "generated by",
      "value": "https://cerez23.github.io/sigma-rule-library/"
    }
  ]
}