Add ATT&CK sub-technique support to CLI (#614)

* Add Mitre sub-technique support to CLI
* Add subtechnique enum to schema
* Add test to prevent duplicative tactics in mapping

rules/windows/execution_command_shell_started_by_powershell.toml

@@ -30,19 +30,11 @@ id = "T1059"
 name = "Command and Scripting Interpreter"
 reference = "https://attack.mitre.org/techniques/T1059/"
 
-
-[rule.threat.tactic]
-id = "TA0002"
-name = "Execution"
-reference = "https://attack.mitre.org/tactics/TA0002/"
-[[rule.threat]]
-framework = "MITRE ATT&CK"
 [[rule.threat.technique]]
 id = "T1086"
 name = "PowerShell"
 reference = "https://attack.mitre.org/techniques/T1086/"
 
-
 [rule.threat.tactic]
 id = "TA0002"
 name = "Execution"