Attack tree — data exfiltration
Insider, network, and side-channel exfil paths.
Make it your own.
title "Exfiltrate customer database"
goal G "Exfiltrate customer DB"
OR G1 "Insider threat" parent G
OR G2 "Network egress" parent G
OR G3 "Side-channel" parent G
leaf L1 "Bribe DBA" parent G1 cost 9 skill low detect medium
leaf L2 "Coerce DBA" parent G1 cost 7 skill medium detect medium
leaf L3 "Tunnel via DNS" parent G2 cost 4 skill high detect medium
leaf L4 "Encrypted upload" parent G2 cost 2 skill medium detect high
leaf L5 "Photograph screen" parent G3 cost 0 skill none detect low