SecurityAround since 2013
MITRE ATT&CK
Also written as ATT&CK Framework, Cyber Kill Chain, TTPs
A public catalogue of the techniques attackers use, organised by stage of an attack. Teams map their detections onto it to see which attacker behaviours they would actually notice.
Think of it like
A list of every route into a building, used to check which ones have a camera pointed at them.
Junior or senior?
Standard vocabulary in detection roles.
Senior sounds like
Used it to find and close a specific blind spot, rather than to relabel alerts they already had.
Ask them
“Which attacker technique did you find you couldn't detect, and what did you do about it?”