Diamond Model of Intrusion Analysis

Definition

1. 1.Framework linking adversary, capability, infrastructure, and victim in intrusion analysis.

Example

Analysts used the diamond model to connect tooling to attacker infrastructure.

Related Exams