The Bowtie ATT&CK
JD Bamford begins looking for a unifying approach to the Bowtie risk modeling and MITRE's ATT&CK framework by overlaying an attack on both. He then dives into some areas where ATT&CK may be lacking for attacks on ICS. JD makes the case that the ATT&CK Matrix for Enterprise and the ICS Matrix should be consolidated into one matrix.