Kill Chain & Diamond Model Analysis
Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.
Z-Pentest Alliance
(threat actor)
11 techniques
40 tools/malware
0 vulnerabilities
3 IOCs
5/7 stages covered
Deepest: Actions on Objectives
›
›
›
›
›
›
7
Actions on Objectives
5
Stage risk:
Critical
High
Medium
None
Indicators of Compromise (3)
ATT&CK Tactic Coverage
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command & Control
Exfiltration
Impact
Recommended Mitigations
18 MITRE ATT&CK mitigations cover detected techniques
Browse all →
Actions on Objectives
(10)
Detection Coverage
8 strategies
5/7 stages covered
Actions on Objectives
(2)
Diamond Model of Intrusion
Adversary · Capability · Infrastructure · Victim
Z-Pentest Alliance
Type: Unknown Active
Z-Pentest
tracked as
Earth Bluecrow
DecisiveArchitect
Red Dev 18
11 technique(s) 40 tool(s)/malware
Targeted Sectors
financial-services
manufacturing
energy
defense
critical-infrastructure
oil-gas
government
maritime
healthcare
Targeted Countries
RU
AU
US
IR
IL
IT
CN
UA
TR
Diamond Model Meta-Features
Phase
Actions on Objectives
Direction
Adversary → Infrastructure → Victim
Adversary → Capability
Adversary → Infrastructure
Capability → Victim
Infrastructure → Victim
Diamond Model edges
Activity Threads
Kill chain phase → Diamond Model event mapping