Kill Chain

The cyber kill chain maps attacks through stages including reconnaissance, weaponization, delivery, exploitation, installation, command and control, and actions on objectives. Understanding the kill chain helps SOC teams identify where in an attack sequence a given alert fits, and where they can most effectively detect or interrupt an attack. Correlating alerts across kill chain stages is key to understanding the full scope of a threat.