v3.2.0 — Procedure-Level Coverage Analysis & STIX Graph

What's New

Procedure-Level ATT&CK Coverage Analysis

• Analyze detection coverage at the procedure/sub-technique level, not just technique
• New analyze_coverage and analyze_actor_coverage tools
• Actor-level coverage comparison across detection sources

MITRE ATT&CK STIX Ingest + Relationship Graph

• Full STIX 2.1 parser for ATT&CK enterprise data
• Materialized relationship graph linking techniques → groups → software → mitigations
• New schema and query layer in src/db/

MCP Spec Compliance

• Updated to MCP 2025-11-25 specification
• VS Code / VS Code Insiders install deeplinks
• Improved documentation

Fixes

• KQL and Sublime parser improvements
• Detection DB query enhancements