Just what are "tactics"? Introduction MITRE ATT&CK is a great resource, but something about it has bothered me since I first heard about it several years ago. It's a minor point, but I wanted to document it in case it confuses anyone else. The MITRE ATT&CK Design and Philosophy document from March 2020 says the following: At a high-level, ATT&CK is a behavioral model that consists of the following core components: • Tactics, denoting short-term, tactical adversary goals during an attack; • Techniques, describing the means by which adversaries achieve tactical goals; • Sub-techniques, describing more specific means by which adversaries achieve tactical goals at a lower level than techniques; and • Documented adversary usage of techniques, their procedures, and other metadata. My concern is with MITRE's definition of "tactics" as "short-term, tactical adversary goals during an attack," which is oddly recursive. The key word in the tacti...
Comments
Nice!
(Unfortunately, your CAPTCHA scuttled my attempt to post this comment via elinks...)
:/
John
I agree with the width issue -- that is my only complaint at the moment.
If I can find a way around that, I might alter the layout.
Thanks for your support though!
Typical of Blogger though to break things so that such changes are necessary to fix the RSS issue.
A suggestion -- if you use Firefox, you can make HTML validation easier with Marc Gueury's HTML Validator extension. Since it uses a local copy of the W3C tidy library, you can validate local files without having to either upload them or make them reachable from public IP space. It also turns your "Show source" window into a basic HTML debugger that lists hints on what the problem might be. I can't recommend it highly enough.