TheDiamond Model of Intrusion Analysisconsists offour core attributes:
Adversary– The threat actor behind the attack.
Capability– The tools and techniques used.
Infrastructure– The systems used by the adversary (e.g., botnets, C2 servers).
Victim– The target of the attack.
Option A (Delivery)andOption B (Weaponization)are part of theCyber Kill Chain, not the Diamond Model.
Option C (Command and control)is an attack phase butnot a core attribute of the Diamond Model.
Option D (Capability) is correct, as it represents the tools and attack methods used by adversaries.
Thus,D is the correct answer.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit