Why another framework?

This chapter introduces the framework at a high level, with subsequent chapters breaking down the different sub-frameworks and components. Throughout this publication, we will focus on conceptual and practical deep dives into the framework in practice and beyond. The intent is to provide value by enhancing an organization’s ability to organize, plan, scope, prioritize, maximize efficiency, and focus on the most economical use of our resources.

The goals of organizing around a framework include:

• To help provide focus and direction for any teams struggling with organization around security research and development

• To provide insights into applied detection engineering approaches

• To create a convenient way to categorize and establish relationships between topics and concepts for context and explainability, allowing for streamlined collaboration and sharing of content