Cyber Telemetry Coverage Map.

Required input fields.

• Identity logs (required): Missing, Partial, Complete and reviewed
• Endpoint telemetry (required): Missing, Partial, Complete and reviewed
• Cloud audit logs (required): Missing, Partial, Complete and reviewed
• Network telemetry (required): Missing, Partial, Complete and reviewed
• Email logs (required): Missing, Partial, Complete and reviewed
• Application logs (required): Missing, Partial, Complete and reviewed
• Data access logs (required): Missing, Partial, Complete and reviewed

Data handling: this interface uses the L2ET protected same-origin instrument engine. Do not enter confidential, regulated, privileged, incident, medical or sensitive operational data.

Heatmap logic.

Scores layer coverage and highlights gaps that would weaken detection, timeline construction or recovery validation.

Source families

Assumptions

• Coverage quality depends on retention, fields and access.
• The tool does not inspect actual logs.
• High coverage does not guarantee detection quality.

Cyber telemetry coverage map.

The generated artifact includes findings, assumptions, limitations, recommended next actions and exportable structured output.

Export options

Example input and output.

Example input

Email logs are complete but network and data access logs are missing.

Example output

Outputs telemetry heatmap, missing evidence layers and prioritized logging improvements.