On Detection, Information Security, Research, Detection Engineering.
nothing wrong with using signatures as a part of a comprehensive detection strategy, but we often conflate signatures with behavioral detections. Modality Masquerading as a Technique Another thing I want to point out is what I perceive to be an error in the way that ATT&CK categorizes some