(thread) One of the things we talked about on the @redcanaryco @CarbonBlack_Inc @MITREattack webinar today was how to start with one attack and use that to build a stronger defensive program. But people also ask, how do I even start with one analytic? Well, here's one approach. I don't want to repeat the webinar, so let's use an ATT&CK technique as an example: attack.mitre.org/techniques/T11…