To address shortcomings in Microsoft Threat Modeling v1, CTMM
builds a body of knowledge through iterative interaction between threat
analysts and software developers. It enables analysts to maintain a growing
database of threats, create documentation for security reviews, and produce