MITRE framework benefits

MITRE framework provides security advantages that

• enable administrators to act on traffic based on MITRE Tactics, Techniques, and Procedures (TTPs) added to intrusion events,

• allow viewing and handling traffic with more granularity through grouping rules by vulnerability type, target system, or threat category, and

• provide the ability to organize intrusion rules according to the MITRE ATT&CK framework for customized policies based on specific attacker tactics and techniques.