How do we indicate if a sub-techniques or techniques have a low or high detection confidence via MITRE ATT&CK?
I was doing the MITRE ATT&CK SOC Assessment course and had a question about the right assessment of techniques and sub-techniques.
The sub-technique that we want to assess is "Application or System Exploitation"(ID: T1499.004… Continue reading How do we indicate if a sub-techniques or techniques have a low or high detection confidence via MITRE ATT&CK?