Make It Work: The MITRE ATT&CK Framework and How to Put It Into Practice