The Diamond Model of Intrusion Analysis

From GCA ACT
Jump to navigationJump to search

Description

This paper presents the Diamond Model, a cognitive framework and analytic instrument to support and improve intrusion analysis. Supporting increased measurability, testability and repeatability in intrusion analysis in order to attain higher effectivity, efficiency and accuracy in defeating adversaries is one of its main contributions.

More Information

URL: https://github.com/hslatman/awesome-threat-intelligence/blob/main/docs/diamond.pdf