Skip to content

Field

Diamond

Four features of an intrusion.

Adversary

The actor or organization conducting the intrusion. Usually the emptiest vertex, and the one people fill in first.

Capability

The tooling: malware, exploits, scripts, techniques.

Infrastructure

The communications structure used: domains, addresses, servers, accounts.

Victim

The target: person, organization, asset, or the data itself.