Why Model and Detect Late Stage Attacks
- Posted: Jun 30, 2016 at 6:56AM
Right click “Save as…”
Think of an attack path (or kill chain) as one of those kids toys where you rotate animals. Heads, bodies, tails. Intrusions, compromises, exfiltrations. Which part is easiest to detect and why?