It is not only important to understand what type of attack and tools are used in an attack but also who is attacking you.
Traditional security training teaches older narratives about who hackers are and why they do things. Old ways of teaching security and attacker detection are no longer working.
Today’s attackers are more sophisticated and complex so that you know what the typical signs and attack techniques are of today’s attacks.