中の人に何かあったのか
「ATT&CKへの理解が間違っているよ、全部はカバーしてないよ」、と悲しんでいるように見えるが、ニュアンスが読みとれない。
どこかで批判をされているとか、何か背景があるのか。
Continuing our series on ATT&CK misunderstandings, we'd like to discuss attribution...
— ATT&CK (@MITREattack) January 23, 2023
It may be tempting to attribute groups based on technique usage, but ATT&CK techniques only represent ONE aspect of a group & are generally too broad to produce reliable attribution alone. pic.twitter.com/b6R1j49HL8
Let's continue our ATT&CK misunderstandings series & discuss procedures.
— ATT&CK (@MITREattack) February 6, 2023
People sometimes assume ATT&CK is trying to cover every possible way a (sub-)technique can be done, but our procedures only cover what we've seen in public reporting tied to Groups, Software, or Campaigns. pic.twitter.com/M0b3rfhRH9
コメントをお書きください