Just what are "tactics"? Introduction MITRE ATT&CK is a great resource, but something about it has bothered me since I first heard about it several years ago. It's a minor point, but I wanted to document it in case it confuses anyone else. The MITRE ATT&CK Design and Philosophy document from March 2020 says the following: At a high-level, ATT&CK is a behavioral model that consists of the following core components: • Tactics, denoting short-term, tactical adversary goals during an attack; • Techniques, describing the means by which adversaries achieve tactical goals; • Sub-techniques, describing more specific means by which adversaries achieve tactical goals at a lower level than techniques; and • Documented adversary usage of techniques, their procedures, and other metadata. My concern is with MITRE's definition of "tactics" as "short-term, tactical adversary goals during an attack," which is oddly recursive. The key word in the tacti...
Comments
Come one ... everyone knows you and your work, ive read your books and this is the stop one for new books and great reviews.
I read this side via RSS. I miss out on the comments that way, but honestly thanks to RSS I don't "surf" anymore. RSS pulls down anything I am interested in, and thats it. If a content site does not publish RSS, I don't come back. Sites like say, snort.org are different. You go there to DL something not to read content.
I only really hit the site directly when I want to bookmark something.
While I like to have an idea about my readership, my readers have ways that they want to read, and I'm ok with that.
So I have readers on RSS, on a variety of aggregation sites, on Livejournal, etc.
Would I love for them to all come to the site so I could track 'em? Sure. But how many more do I reach by being easy to reach?
Typically use firefox as the browser to read bloglines feeds as there are some nice greasemonkey user scripts to get rid of the ads that are increasingly appearing in RSS feeds :-)
You have a valuable resource. Don't allow others to profit off your big brain. Your site is a destination. Keep improving it and it will become even more popular. Don't dilute your product.
Similar to 'Jim', RSS/XML has been the one thing which has changed the way I interact with the web.
Allowing one to keep track of far greater volumes of much more interesting material with a lot less effort.
Greg
Your content is excellent and the way you research your material is priceless. I appreciate your direct nature rather than sugar coating.
As far as letting someone else use your content, I would charge some fee (at least get back something for your time posting to the blog).
Keep up the good work..
-jf
However, I go to your site directly to read the articles and comments if I find the articles of particular interest
I read it the old-fashioned way, too. I read very few blogs on a regular basis, so perhaps that is why my method is different from the RSS/other readers.
http://mina.naguib.ca/news.shtml
I can remove your feed if you don't like the content appearing elsewhere on the internet.
Can anyone please explain what all that RSS stuff is all about?
Read this ... RSS Described in Plain English
I either read the site on my PDA phone or on my PowerBook with Firefox. Nothing else.
I believe the real question is how did I come to know of your site? Although I don't remember specifically, my best guess is it was referenced from another blog.
I would also guess that is the #1 way you increase your readership.
And I hear ya - I publish a site myself, and I see that aggregators (like Bloglines) 'hide' a lot of readers from a site's author/administrator. So we may think we are getting 4 readers per day when in fact another 40 people read us religiously via various aggregators.
If we had a better idea of who our audiences were, we'd have a better sense of what to give them. But today's world of aggregation and re-posting (with or without attribution!) makes that difficult. I feel like a DJ who doesn't know if the microphone is connected or if the transmitter is turned on ...
And to the anonymous poster about aggregators hiding readers: check your logs, Bloglines, My Yahoo!, and most other major aggregators tell you how many subscribers they're grabbing for in the User-Agent line. Feedburner handles this automatically for you, but whatever log analysis software you use should be able to be extended to handle this.