🔁 Attack & Detect

Run ATT&CK techniques with the blue team in the room, then close the gaps together. Find the misses — without turning the session into a gotcha.