intrusion analysis
-
The Cyber Kill Chain: How CTI Analysts Map Attacks and Break the Adversary’s Sequence
A practical guide for CTI analysts on using the Cyber Kill Chain to map intrusions. Learn the seven stages, where to detect adversaries at each stage, and how to combine Kill Chain analysis with the Diamond Model. Written by Reza Rafati.
-
The Diamond Model of Intrusion Analysis: A CTI Analyst’s Guide to Structured Threat Analysis
A practical guide for CTI analysts on using the Diamond Model to analyse intrusions. Learn to map every event across Adversary, Capability, Infrastructure, and Victim dimensions, identify intelligence gaps, and pivot between events. Written by Reza Rafati.