Mapping Observations To MITRE ATT&CK