Documented patterns, techniques, and procedures observed in real-world intrusions and security assessments.