A threat hunting team receives a report about possible APT activity in the network. Which of the following threat management frameworks should the team implemen...