Hello everyone, We are a group of students from Friedrich-Alexander-Universität Erlangen-Nürnberg (FAU) and Hochschule München conducting a research study on how cybersecurity professionals interpret and apply MITRE ATT&CK techniques in operational contexts. The study focuses on: consistency in ATT&CK classification, ambiguity and overlap between techniques, analyst reasoning during ATT&CK mapping, and the role of operational context. Participation involves analyzing short attack scenarios and assigning ATT&CK techniques. The study takes approximately 20–25 minutes. We would greatly appreciate participation from SOC analysts, threat hunters, CTI analysts, detection engineers, incident responders, red/purple teamers, and other cybersecurity practitioners. Study link: https://www.doyouspeakattack.tf.fau.de/ Thank you very much for your support! ... View more