ATT&CK framework
Adversarial Tactics, Techniques & Common Knowledge, developed by MITRE. Columns represent Tactics
Diamond Model
An intrusion analysis framework with 4 key features
4 Points of Diamond model
Attacker, victim, capabilities, infrastructure
Cyber Kill Chain
A Lockheed Martin model of individual intruder behavior which models the phases of an attack focusing on Advanced Persistent Threats
Cyber Kill Chain steps
1) Reconnaissance 2) Weaponization 3) Delivery 4) Exploitation 5) Installation 6) Command & Control 7) Actions on Objectives