A catalog of adversary behavior: tactics as the objective, techniques as the method, procedures as a specific actor’s implementation.
Use
Describing findings in shared vocabulary and checking what you have not looked for.
Limit
Mapping behavior to a technique ID is a description, not an attribution. Overlapping technique use is the norm.