Kill Chain & Diamond Model Analysis
Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.
Sands Casino
(threat actor)
11 techniques
5 tools/malware
0 vulnerabilities
2 IOCs
1/7 stages covered
Deepest: Actions on Objectives
›
›
›
›
›
›
7
Actions on Objectives
11
T1053.006 Scheduled Task/Job
T1078.002 Valid Accounts: Local Account
T1086 Windows Command Shell
T1105 Ingress Tool Transfer
T1110.001 Password Guessing
T1110.003 Password Spraying
T1498 Network Denial of Service
Stage risk:
Critical
High
Medium
None
Indicators of Compromise (2)
ATT&CK Tactic Coverage
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command & Control
Exfiltration
Impact
Diamond Model of Intrusion
Adversary · Capability · Infrastructure · Victim
Sands Casino
Type: Unknown Active
11 technique(s) 5 tool(s)/malware
Targeted Sectors
gaming
government
Diamond Model Meta-Features
Phase
Actions on Objectives
Direction
Adversary → Infrastructure → Victim
Adversary → Capability
Adversary → Infrastructure
Capability → Victim
Infrastructure → Victim
Diamond Model edges