Right now, there is an implicit assumption that all tactics, techniques, etc. are part of the Enterprise ATT&CK framework.
This is largely represented in the regex used to identify object IDs, but Mobile and ICS use slightly different ID formats. It would be nice to include these matrices and provide support equivalent to the Enterprise matrix.
ICS may change (possibly a lot) in the coming months, so it may be best to put that off until it is fully merged with the rest of ATT&CK
Right now, there is an implicit assumption that all tactics, techniques, etc. are part of the Enterprise ATT&CK framework.
This is largely represented in the regex used to identify object IDs, but Mobile and ICS use slightly different ID formats. It would be nice to include these matrices and provide support equivalent to the Enterprise matrix.
ICS may change (possibly a lot) in the coming months, so it may be best to put that off until it is fully merged with the rest of ATT&CK