Identity and SaaS Intrusions

Enterprise ATT&CK splits Defense Evasion into Stealth and Defense Impairment

The Enterprise matrix now runs 15 tactics, and the two that replaced Defense Evasion leave different forensic evidence, so detection content mapped to the old tactic has to be reassigned technique by technique.