The MITRE ATT&CK Framework Is Not A Bingo Card

I occasionally find people mapping their SOC capabilities to the ATT&CK framework by checking off specific techniques that they have shown they are able to detect with the intent of measuring coverage within their SOC. In this blog post, I hope to clarify why this strategy may be misleading. There Are No Bad Actions, Only […]