Skip to content

Data quality

Jump to bottom
Marcus Bakker edited this page Dec 17, 2019 · 10 revisions

What is the quality of the data? If the quality of your data is poor, either it is hard to find what you are looking for or data may not be there. That is where scoring your data quality comes in. DeTT&CT offers a standardised scoring table to score your data's quality based on different aspects. Use the score that fits best. When you have determined the quality of all your data sources, you can start improving.

Data quality dimensions

DeTT&CT describes five different data quality dimensions: device completeness, data field completeness, timeliness, consistency and retention. Scoring your data quality means scoring each of these dimensions for every data source you have. The scoring table will guide you in scoring.

The administration of your data sources can be done in YAML files and is described in YAML administration data sources.

Overview

  1. Home
  2. Introduction
  3. Installation and requirements
  4. Getting started / How to
  5. Changelog
  6. Future developments
  7. ICS - Inconsistencies

Data sources

  1. Introduction
  2. DeTT&CT data sources
  3. Data sources per platform
  4. Data quality
  5. Scoring data quality
  6. Improvement graph

Visibility Coverage

  1. Introduction
  2. Scoring visibility
  3. Improvement graph

Detection coverage

  1. Introduction
  2. Scoring detection
  3. Improvement graph

Threat actor group mapping

  1. Introduction

YAML administration files

  1. Introduction
  2. Data sources
  3. Techniques
  4. Groups
  5. DeTT&CT Editor
Clone this wiki locally