Cyber Threat Alliance and Unit 42, Palo Alto Networks have been advocating for the past five years to embrace adversary playbooks. The idea is that network defenders should be deploying prevention and detection controls at all locations on the intrusion kill chain, designed specifically for all known adversary campaigns. The number of active playbooks running on the internet on any given day is less than 100, with some thinking it’s less than 50, according to the Cyberthreat Alliance. The alliance has been on track to publish one adversary playbook a month.”]