Tie to Lab 4

• Lab 4: Behavior Scorer. You will parse a Procmon CSV export from a detonation.
• Implement weighted rules across ATT&CK tactics (persistence, evasion, C2, impact).
• Produce a numeric score, a verdict, and a list of IOCs.
• Deliverable: a script + a short report mapping observed behavior to ATT&CK techniques.