Our view on this round of ATT&CK Evaluations and how Sophos detected 99% of real-world threat activity.