Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started

Kill Chain & Diamond Model Analysis

Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.

Storm-2139 (threat actor)
Risk
32
Medium
2 techniques 23 tools/malware 0 vulnerabilities 7 IOCs 1/7 stages covered Deepest: Actions on Objectives
1 Reconnaissance
No data
2 Weaponization
No data
3 Delivery
No data
4 Exploitation
No data
5 Installation
No data
6 Command & Control
No data
7 Actions on Objectives
2
T1078
T1542
Stage risk: Critical High Medium None

ATT&CK Tactic Coverage

Reconnaissance Resource Development Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Collection Command & Control Exfiltration Impact

Detection Coverage

2 strategies
1/7 stages covered

Diamond Model of Intrusion

Adversary · Capability · Infrastructure · Victim

Completeness
4/4
Adversary
Confidence
60%

Storm-2139

Type: Unknown Active
tracked as China
Victim
70%

Targeted Sectors

defense education critical-infrastructure government non-profit

Targeted Countries

US JP

Diamond Model Meta-Features

Phase

Actions on Objectives

Result

Active

Direction

Adversary → Infrastructure → Victim

Methodology

Unknown

Adversary → Capability
Adversary → Infrastructure
Capability → Victim
Infrastructure → Victim
Diamond Model edges
Leaving Threaticon

This link opens an external site that isn't part of the platform.