Why LLMs Hallucinate on MITRE ATT&CK — And How RAG Fixes It

The Problem Ask any frontier LLM "what sub-techniques fall under T1078 — Valid Accounts?" and you'll get a confident, detailed answer. You'll also get things that are wrong. Not because the model is u