Add MITRE ATT&CK metadata to rules

[tstromberg]

https://attack.mitre.org/

To have a common vocabulary around attacker behaviors. #452 is related.