AML.T0017
MITRE ATLAS / Develop Capabilities
Adversaries build their own capabilities to support operations when nothing suitable exists off the shelf, including custom adversarial example generators, poisoning pipelines, and purpose-built malware.
In plain English
When a target is unusual enough that public tools do not work, a determined adversary writes their own. Custom tooling is slower to build and much harder for defenders to recognize.