Detection
and
Visibility Insights
at your fingertips
Sirius Blue helps your organization to automate the mapping of defensive capabilities to the MITRE
ATT&CK® framework.
Providing you the insight to make
informed decisions
about your
security
investments
and efforts.
Features
Detect, score and compare
Sirius Blue is a detection use case management system utilizing the MITRE ATT&CK and MaGMa frameworks. Connect Sirius Blue easily to your SIEM and EDR to ingest detection rules and log sources. Enrich and enhance this information with scores and administrate relevant use case information. Visualize detection and visibility coverage on the ATT&CK matrix. Get the information you need by advanced filtering options. See instantly where you need to improve your defensive capabilities.
Real time Insights
Detection overview
Gain real time insight into your defensive capabilities – both in terms of coverage and effectiveness.
Filter
Enhanced filtering
Filter techniques on attack groups, mitigations, rules and anything that is linked to them
Dashboard
See what happened
Track what happened and continue where you left off.
Plugins
Write your own
Write your own plugins and use the ones provided together in a single system
Mitigations
System provided mitigations
Check on Mitigations, how well they are covered, and which implementations you have for them
Generate reports, customize to your needs
-
Match capabilities
- Match your defensive capabilities against attacker Tactics Techniques and Procedures (TTPs) and purple teaming engagements.
-
Adaptability
- Easy configuration with plugins to automatically ingest data from your SOC tools like SIEMs and EDR solutions.
-
Drive your decision making
- Establish a strategic and prioritized approach for initiating cyber defense efforts.
-
Management insights
- Explore your coverage from multiple perspectives, track progress over time, and gain insights through a variety of statistical views.
-
Detection use case management
- Manage detection rules and use cases based on proven MITRE ATT&CK® and MaGMa standards.
-
Purple Teaming
- Track purple teaming engagements to discover and improve your coverage.
-
Mitigations
- Track and score mitigating controls mapped to the MITRE ATT&CK framework. Gain clear insight into how detection and mitigation work together.
Frequently asked questions
-
Sirius Blue is a new product made by the Sirius Security team. People from Sirius Security previously created DeTT&CT & Dettectinator.
-
Sirius Blue provides a Docker-based installation that can run on-premises or in your own (private) cloud. This means you are the owner of your data.
-
Sirius Blue is currently available for a small group of customers. General availability is planned for 2026.
We are currently working together with a few launching customers to make sure we provide the best quality. Want to join? Get in contact with us! Contact us