The planning phase encompasses deciding which adversaries matter to your organization and mapping the techniques they use. This critical step is what makes a threat hunt relevant. It is also the phase most teams often skip because it is slow and research intensive. We built the APT TTP Mapper tool to turn an expertise-intensive process into an automated workflow.