Skip to content

Glossary: Compliance, Privacy and Penetration Testing

Diamond Model of Intrusion Analysis

Also written: Diamond Model

A 2013 model that describes one intrusion event by four linked features: adversary, capability, infrastructure and victim. Analysts pivot from a known corner to the others.

Where the book teaches it

Related terms

AdversaryCapabilityInfrastructureVictimPivotingCyber Kill ChainMITRE ATT&CK