Map adversary behavior to ATT&CK, detect it with the v18 Strategies & Analytics model, and validate it by emulation