An organization wants to model potential threats by analyzing adversary tactics and techniques, common weakness enumeration for attack patterns, and threat categories such as spoofing and tampering. Which set of frameworks aligns with the threat modeling task?