The framework used for classifying cyber threats is typically the MITRE ATT&CK framework. This comprehensive matrix categorizes threats based on the tactics, techniques, and procedures (TTPs) employed by adversaries. By understanding the various stages of an attack, organizations can better defend against potential breaches. This framework helps security teams prioritize defenses based on evidenced threats, aligning security measures with real-world attack patterns. It serves as a common language for security researchers and practitioners, enhancing communication and collaboration in threat intelligence.