Cyber Kill Chain

Lockheed Martin – Cyber Kill Chain

Developed by Lockheed Martin, the Cyber Kill Chain® framework is part of the Intelligence Driven Defense® model for identification and prevention of cyber intrusions activity. The model identifies what the adversaries must complete in order to achieve their objective.

The seven steps of the Cyber Kill Chain® enhance visibility into an attack and enrich an analyst’s understanding of an adversary’s tactics, techniques and procedures.

FireEye Mandiant Attacker Lifecycle

MITRE ATT&CK

Initial Access
Execution
Persistence
Privilege Escalation
Defence Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command and Control
Exfiltration
Impact

Pyramid of Pain

http://detect-respond.blogspot.com/2013/03/the-pyramid-of-pain.html

CIA Triad

Level 1: Initiate: This level is for people new to the information security industry, folks who are rapidly building their skills from the ground up.
Level 2: Padawan: These folks have achieved some really solid capabilities, and represent the largest player community in NetWars, as they work to build their skills even further to differentiate themselves from the pack.
Level 3: Guardian: People at this level have achieved something quite significant: they’ve exceeded the capability of the average info sec person, and proudly continue to grow to the next level.
Level 4: Knight: Some people say that there’s a phrase for NetWars participants who achieve this level: “Hire ’em.” That’s due to their really awesome skills in solving even the trickiest infosec challenges.
Level 5: Master: When you reach this level, we figure that you’re so good, there’s nothing we can throw at you to challenge you… except other people like you. Just as steel sharpens steel, in Level 5, master infosec gurus battle against each other in a castle-vs-castle face-off.