cyber sec

cyber kill chain

is an efficient and effective way of illustrating how an adversary can attack the target

organization.

Reconnaissance

An adversary performs BLANK to collect as much information about the target as possible to

probe for weak points before actually attacking.

Weaponization

The adversary analyzes the data collected in the previous stage to identify the vulnerabilities and

techniques that can be exploited and gain unauthorized access to the target organization.

Delivery

The previous stage included creating a weapon. Its payload is transmitted to the intended victim(s) as an e-mail attachment, via a malicious link on websites, or through a vulnerable web application or USB

drive.

Exploitation

After the weapon is transmitted to the intended victim, BLANK triggers the adversary’s malicious

code to exploit a vulnerability in the operating system, application, or server on a target system.

Installation

The adversary downloads and installs more malicious software on the target system to maintain

access to the target network for an extended period.

Command and Control

The adversary creates a BLANK and Blank channel, which establishes two-way communication between the victim’s system and the adversary-controlled server to communicate and pass data back

and forth.

Actions on Objectives

The adversary controls the victim’s system from a remote location and finally accomplishes their

intended goals.

tactics

is defined as a guideline that describes the way an attacker performs their attack from

beginning to end

techniques

is defined as the technical methods used by an attacker to achieve

intermediate results during their attack.

procedures

is defined as the organizational approach followed by the threat actors to launch their attack.

Tactics

Describe the way the threat actor operates during different phases of an attack.

Techniques

To launch an attack successfully, threat actors use several BLANK during their execution.

Procedures

Involve a sequence of actions performed by the threat actors to execute different steps of an attack

life cycle.