v0.4.0 | First public release: Sigma → ATT&CK v19 coverage mapping

First public release 🎉

attack-mapper maps Sigma detection rules onto the MITRE ATT&CK matrix
(v19-native: Stealth + Defense Impairment) to report detection coverage and
gaps — in the terminal, as self-contained HTML (4 styles), JSON, an SVG badge,
and an ATT&CK Navigator layer. Non-zero exit when nothing maps, so it works
as a CI gate for Detection-as-Code pipelines.

pip install attack-mapper
attack-mapper rules/ --html coverage.html --style report

Highlights

• Bundled compact ATT&CK v19 dataset (revoked/deprecated filtered out) — fully offline at runtime
• Scope filters (--include / --ignore) by technique ID, tactic shortname, or TA id
• GitHub Actions included: CI coverage gate + monthly MITRE dataset freshness check

Full history in CHANGELOG.md.