Kill Chain & Diamond Model Analysis
Map a threat actor or campaign across the Cyber Kill Chain and Diamond Model of Intrusion.
Blue Mockingbird
(threat actor)
22 techniques
0 tools/malware
0 vulnerabilities
0 IOCs
6/7 stages covered
Deepest: Actions on Objectives
›
T1588.002
Tool
resource development
›
›
›
›
T1090
Proxy
command and control
›
7
Actions on Objectives
8
Stage risk:
Critical
High
Medium
None
Tools & Malware (0)
None linked.
Indicators of Compromise (0)
None linked.
ATT&CK Tactic Coverage
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Defense Evasion
Credential Access
Discovery
Lateral Movement
Collection
Command & Control
Exfiltration
Impact
Recommended Mitigations
26 MITRE ATT&CK mitigations cover detected techniques
Browse all →
Actions on Objectives
(9)
Detection Coverage
22 strategies
6/7 stages covered
Actions on Objectives
(8)
Diamond Model of Intrusion
Adversary · Capability · Infrastructure · Victim
Blue Mockingbird
Type: Unknown Active
No infrastructure indicators linked.
No victim targeting data available.
Diamond Model Meta-Features
Phase
Actions on Objectives
Direction
Adversary → Capability → Victim
Adversary → Capability
Adversary → Infrastructure
Capability → Victim
Infrastructure → Victim
Diamond Model edges
Activity Threads
Kill chain phase → Diamond Model event mapping
2
Weaponization
Infrastructure
No infra linked
3
Delivery
Infrastructure
No infra linked
4
Exploitation
Infrastructure
No infra linked
5
Installation
Infrastructure
No infra linked
6
Command & Control
Infrastructure
No infra linked
7
Actions on Objectives
Infrastructure
No infra linked