domains / families / security / analyzing-cyber-kill-chain

analyzing-cyber-kill-chain

separate

'Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain

When to use

• Conducting post-incident analysis to determine how far an adversary progressed through an attack sequence
• Designing layered defensive controls with the goal of interrupting attacks at the earliest possible phase
• Producing threat intelligence reports that communicate attack progression to non-technical stakeholders

When not to use

• standalone framework usage
• technique-level granularity beyond 7-phase kill chain

Skill page

Source