[RFC] Implement analysis for exploit mitigation coverage

CC: @devincoughlin