Suspicious Command Analyzer

Command line → intent + risk level + MITRE mapping.