Threaticon
Toggle sidebar

You're viewing a limited, public preview. Log in for full access.

Log in User Guide
Log in Get started

Kill Chain & Diamond Model Analysis

Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.

black x (threat actor)
Risk
44
Medium
4 techniques 32 tools/malware 0 vulnerabilities 39 IOCs 2/7 stages covered Deepest: Command & Control
1 Reconnaissance
No data
2 Weaponization
No data
3 Delivery
No data
4 Exploitation
3
T1204
T1204.001
T1204.002
5 Installation
No data
6 Command & Control
1
T1102.001
Dead Drop Resolver command and control
7 Actions on Objectives
No data
Stage risk: Critical High Medium None

ATT&CK Tactic Coverage

Reconnaissance Resource Development Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Collection Command & Control Exfiltration Impact

Diamond Model of Intrusion

Adversary · Capability · Infrastructure · Victim

Completeness
4/4
Adversary
Confidence
80%

black x

Type: Criminal Sophistication: Medium Active
tracked as Professor X Abyss
Capability
50%
4 technique(s) 32 tool(s)/malware
command and control
Victim
70%

Targeted Sectors

defense manufacturing government financial-services retail critical-infrastructure

Targeted Countries

RU

Diamond Model Meta-Features

Phase

Command & Control

Result

Active

Direction

Adversary → Infrastructure → Victim

Methodology

Criminal

Adversary → Capability
Adversary → Infrastructure
Capability → Victim
Infrastructure → Victim
Diamond Model edges

Activity Threads Kill chain phase → Diamond Model event mapping

4 Exploitation

Capability (Techniques)

Capability (Malware)

6 Command & Control

Capability (Techniques)

Capability (Malware)

Leaving Threaticon

This link opens an external site that isn't part of the platform.