Cyber Kill Chain - Revision history

Mflavell at 20:00, 10 July 2025

2025-07-10T20:00:19Z

← Older revision		Revision as of 20:00, 10 July 2025
Line 1:		Line 1:
	= Introduction =		=Introduction=

	The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage.		The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage.

Mflavell at 20:00, 10 July 2025

2025-07-10T20:00:10Z

← Older revision		Revision as of 20:00, 10 July 2025
Line 3:		Line 3:
	The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage.		The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage.

			=Stages=
	=== Reconnaissance ===		=== Reconnaissance ===
	Attackers gather information about the target, including publicly available data and network vulnerabilities.		Attackers gather information about the target, including publicly available data and network vulnerabilities.

Mflavell at 19:59, 10 July 2025

2025-07-10T19:59:45Z

← Older revision		Revision as of 19:59, 10 July 2025
Line 7:		Line 7:
	Attackers gather information about the target, including publicly available data and network vulnerabilities.		Attackers gather information about the target, including publicly available data and network vulnerabilities.

	== Weaponization ==		=== Weaponization ===
	Attackers create a malicious payload, such as a virus or malware, tailored to the target's vulnerabilities.		Attackers create a malicious payload, such as a virus or malware, tailored to the target's vulnerabilities.

	== Delivery ==		=== Delivery ===
	The malicious payload is delivered to the target, often through phishing emails, infected websites, or other methods.		The malicious payload is delivered to the target, often through phishing emails, infected websites, or other methods.

	== Exploitation ==		=== Exploitation ===
	The attacker exploits vulnerabilities in the system to execute the malicious code and gain initial access.		The attacker exploits vulnerabilities in the system to execute the malicious code and gain initial access.

	== Installation ==		=== Installation ===
	Attackers install malware or backdoors to establish persistent access to the compromised system.		Attackers install malware or backdoors to establish persistent access to the compromised system.

	== Command and Control ==		=== Command and Control ===
	Attackers establish a communication channel to remotely control the compromised system and direct further actions.		Attackers establish a communication channel to remotely control the compromised system and direct further actions.

	== Actions on Objectives ==		=== Actions on Objectives ===
	Attackers achieve their ultimate goal, such as data theft, system disruption, or other malicious activities.		Attackers achieve their ultimate goal, such as data theft, system disruption, or other malicious activities.

Mflavell at 19:59, 10 July 2025

2025-07-10T19:59:26Z

← Older revision		Revision as of 19:59, 10 July 2025
Line 3:		Line 3:
	The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage.		The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage.

	== Reconnaissance ==
			=== Reconnaissance ===
	Attackers gather information about the target, including publicly available data and network vulnerabilities.		Attackers gather information about the target, including publicly available data and network vulnerabilities.

Mflavell at 19:59, 10 July 2025

2025-07-10T19:59:04Z

← Older revision		Revision as of 19:59, 10 July 2025
Line 1:		Line 1:
			= Introduction =

	The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage.		The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage.



	== Reconnaissance ==		== Reconnaissance ==

Mflavell at 19:58, 10 July 2025

2025-07-10T19:58:39Z

← Older revision		Revision as of 19:58, 10 July 2025
Line 4:		Line 4:


	1. Reconnaissance:		== Reconnaissance ==
	Attackers gather information about the target, including publicly available data and network vulnerabilities.		Attackers gather information about the target, including publicly available data and network vulnerabilities.

	2. Weaponization:		== Weaponization ==
	Attackers create a malicious payload, such as a virus or malware, tailored to the target's vulnerabilities.		Attackers create a malicious payload, such as a virus or malware, tailored to the target's vulnerabilities.

	3. Delivery:		== Delivery ==
	The malicious payload is delivered to the target, often through phishing emails, infected websites, or other methods.		The malicious payload is delivered to the target, often through phishing emails, infected websites, or other methods.

	4. Exploitation:		== Exploitation ==
	The attacker exploits vulnerabilities in the system to execute the malicious code and gain initial access.		The attacker exploits vulnerabilities in the system to execute the malicious code and gain initial access.

	5. Installation:		== Installation ==
	Attackers install malware or backdoors to establish persistent access to the compromised system.		Attackers install malware or backdoors to establish persistent access to the compromised system.

	6. Command and Control:		== Command and Control ==
	Attackers establish a communication channel to remotely control the compromised system and direct further actions.		Attackers establish a communication channel to remotely control the compromised system and direct further actions.

	7. Actions on Objectives:		== Actions on Objectives ==
	Attackers achieve their ultimate goal, such as data theft, system disruption, or other malicious activities.		Attackers achieve their ultimate goal, such as data theft, system disruption, or other malicious activities.

Mflavell at 17:16, 10 July 2025

2025-07-10T17:16:55Z

← Older revision		Revision as of 17:16, 10 July 2025
Line 1:		Line 1:

	The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage.		The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage.



	1. Reconnaissance:		1. Reconnaissance:

Mflavell: Created page with " The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage. 1. Reconnaissance: Attackers gather information about the target, including publicly available da..."

2025-07-10T17:16:50Z

Created page with " The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage. 1. Reconnaissance: Attackers gather information about the target, including publicly available da..."

New page

The cyber kill chain is a security framework developed by Lockheed Martin to model the stages of a cyberattack. It helps organizations understand how attacks progress and how to defend against them by identifying key stages and vulnerabilities. The framework breaks down an attack into a series of phases, allowing security teams to focus on preventing attacks at each stage.

1. Reconnaissance:
Attackers gather information about the target, including publicly available data and network vulnerabilities.

2. Weaponization:
Attackers create a malicious payload, such as a virus or malware, tailored to the target's vulnerabilities.

3. Delivery:
The malicious payload is delivered to the target, often through phishing emails, infected websites, or other methods.

4. Exploitation:
The attacker exploits vulnerabilities in the system to execute the malicious code and gain initial access.

5. Installation:
Attackers install malware or backdoors to establish persistent access to the compromised system.

6. Command and Control:
Attackers establish a communication channel to remotely control the compromised system and direct further actions.

7. Actions on Objectives:
Attackers achieve their ultimate goal, such as data theft, system disruption, or other malicious activities.