Cyber Kill Chain
Lockheed Martin's seven-phase intrusion model with defender controls per stage.
Rendering…
Make it your own.
flowchart LR
R[Reconnaissance] --> W[Weaponisation]
W --> D[Delivery]
D --> E[Exploitation]
E --> I[Installation]
I --> C[Command & Control]
C --> A[Actions on objectives]
classDef phase fill:#fee2e2,stroke:#991b1b;
class R,W,D,E,I,C,A phase
R -.- DR[Detect: threat intel, OSINT]
D -.- DD[Block: email gateway, web filter]
E -.- DE[Patch: vuln mgmt, EDR]
I -.- DI[Detect: EDR, file integrity]
C -.- DC[Block: DNS sinkholing, egress filter]
A -.- DA[Contain: network segmentation]
classDef ctrl fill:#dcfce7,stroke:#166534;
class DR,DD,DE,DI,DC,DA ctrl