Post #4068931

@DaveMWilburn@infosec.exchange Right so as I said, I believe "clustering" has value. To me, the strong form of "attribution" is "This is who did it and we're making a claim about it." And the reason I don't care is because that level of assignation does not impact my defensive choices. On the other hand, it eats up so much oxygen in threat intelligence reports.