Cyber KC

Question 1

The attackers passively or actively gather information, explore vulnerabilities

Answer 1

Reconnaissance

Question 2

The attacker creates an attack vector, usually a weaponized payload. This may be customized to the target.

Answer 2

Weaponization

Question 3

The payload is delivered to the target. Could be through email, malicious website, or infected files. The weaponized code has entered the target environment.

Answer 3

Delivery

Question 4

The initial time the malicious code executes within the target system. Usually aims to escalate privileges within the system or network.

Answer 4

Exploitation

Question 5

Malware or another attack vector (e.g. a backdoor) is installed on the target system. System, config, registry files may be changed.

Answer 5

Installation

Question 6

The attacker can now issue commands remotely and will often create more backdoors, make lateral movements to compromise more systems

Answer 6

Command & Control

Question 7

The attacker carries out their original intended goals e.g. Data Exfiltration, Data Destruction, Espionage

Answer 7

Actions on Objectives