How do you investigate and report on a threat actor’s TTPs in a way that supports defensive action at AIG?
