What does the MITRE ATT&CK framework's 'Kill Chain' concept describe in the context of incident response?

Question

Accepted Answer

A. The sequential stages of a cyberattack from reconnaissance to objectives. The cyber kill chain describes the sequential phases of a cyberattack (reconnaissance, weaponization, delivery, exploitation, installation, command and control, and actions on objectives). The CySA+ exam objectives reference kill chain frameworks under attack methodology frameworks in the Incident Response Management domain. Understanding kill chain stage helps responders identify where an attacker is and interrupt the attack.

What does the MITRE ATT&CK framework's 'Kill Chain' concept describe in the context of incident response?

Related Questions

Discussion