“That's the whole notion of using CAPEC and ATT&CK to build good, misuse cases to see, to see if whatever is being offered up can be abused in a way that compromises security before it's designed, right?”

Transcript evidence from Kevin Greene -- Shifting left.