MITRE ATT&CK as a Detection Engineering Vocabulary
Use of MITRE ATT&CK as the reference vocabulary for detection engineering — mapping of detections to adversarial techniques and tactics and measurement of coverage. ATT&CK is a shared vocabulary and a threat-informed reference, not a complete authority nor a checklist for total coverage.