https://medium.com/dark-roast-security/assessing-mapping-security-tool-capabilities-to-the-att-ck-matrix-c93a9797581d
