Ontinue interview question

Mostly around MITRE framework and windows event IDs