Quick question to the blue teamers out there:
What's your take on MITRE ATT&CK Tactics and Techniques? Do you find them useful? If yes, how and in what capacity do you use them? (To the extent that you can and want to share...)
If you could have tactics and techniques extracted from publicly available reports/articles, would that be useful? If yes, why?
(And imagine extracted not just by direct technique referencing, but also indirectly extracted through textual descriptions.)