1. EachPod
EachPod

Encore: Diamond Model (noun) [Word Notes]

Author
N2K Networks
Published
Tue 04 Jul 2023
Episode Link
https://thecyberwire.com/podcasts/word-notes/100/notes

A cyber threat intelligence analysis model that defines relationship pairs between four core components in the shape of a diamond of adversary playbook activity across the intrusion kill chain: the adversary, their capability, the infrastructure used or attacked, and the victim.
CyberWire Glossary link: https://thecyberwire.com/glossary/diamond-model
Audio reference link: “Diamond Presentation v2 0: Diamond Model for Intrusion Analysis – Applied to Star Wars’ Battles,” Andy Pendergrast and Wade Baker, ThreatConnect, YouTube, 4 February 2020.

Share to: