This is the discussion thread for the lesson "MITRE ATT&CK Technique Mapping" (Reverse Engineering and Malware Analysis, Unit 7). Ask questions, share real-world examples, and help classmates who are stuck.
Conversation starters. Try explaining one of these in your own words:
- Identify the 14 ATT&CK tactics and locate techniques within them
- Map a set of observed malware behaviours to ATT&CK techniques with appropriate confidence
- Distinguish between technique observation, inference, and assumption
