Kill Chain

Question 1

Who created the kill chain?

Answer 1

Lockheed Martin

Question 2

What is the purpose of the kill chain?

Answer 2

It is a model for identification and prevention of cyber intrusions activity. The model identifies what the adversaries must complete in order to achieve their objective.

Question 3

What are the steps in the kill chain?

Answer 3

1. Reconnaissance
2. Weaponization
3. Delivery
4. Exploitation
5. Installation
6. Command & Control (C2)
7. Actions on Objectives

Question 4

Reconnaissance

Answer 4

Harvesting information about the target (email addresses, employee information, software/hardware used, etc.)

Question 5

Weaponization

Answer 5

Coupling exploit with backdoor into deliverable payload

Question 6

Delivery

Answer 6

Delivering weaponized bundle to the target via email, web, USB, etc.

Question 7

Exploitation

Answer 7

Exploiting a vulnerability to execute code on victim’s system

Question 8

Installation

Answer 8

Installing malware on the asset

Question 9

Command & Control (C2)

Answer 9

Command channel for remote manipulation of victim

Question 10

Actions on Objectives

Answer 10

With ‘Hands on Keyboard’ access, intruders accomplish their original goals