## Techniques: The "How" (The Cells)

Under each Tactic, there are many Techniques. A Technique is a specific way to achieve the goal.

### Sub-Techniques
In 2020, MITRE added Sub-Techniques (T1xxx.001) because the matrix was getting too crowded.
*   **Technique**: **Brute Force (T1110)**.
    *   **Sub-Technique**: .001 Password Guessing.
    *   **Sub-Technique**: .002 Password Cracking.
    *   **Sub-Technique**: .003 Password Spraying.
    *   **Sub-Technique**: .004 Credential Stuffing.

### Example: Phishing (T1566)
*   **Tactic**: Initial Access.
*   **Technique**: Phishing.
*   **Sub-Techniques**:
    *   Spearphishing Attachment (Sending a doc).
    *   Spearphishing Link (Sending a URL).
    *   Spearphishing via Service (LinkedIn/WhatsApp message).

### Using the Knowledge Base
When you click a Technique on the MITRE website, it tells you:
1.  **Description**: How it works.
2.  **Procedure Examples**: Which hacker groups have used this? (e.g., "APT28 used this in 2016").
3.  **Mitigations**: How to stop it (Disable RDP).
4.  **Detection**: How to find it (Event ID 4624).
*This is basically a cheat sheet for your job.*