10 templates
Attack tree (cybersec) templates
Native attack-tree diagrams for threat modelling and security review. Declare a root goal, then sub-goals as AND (all-of) or OR (any-of) refinements. Leaf nodes carry cost / skill / detection estimates that propagate up the tree. Critical paths render in red. Compatible with STRIDE / DREAD workflows.
Attack tree — steal user credentials
Phishing + server compromise paths, with cost rollup.
Operations & OpsAttack tree — cloud account takeover
AWS / SaaS account takeover paths.
Operations & OpsAttack tree — data exfiltration
Insider, network, and side-channel exfil paths.
Operations & OpsRansomware (Attack Tree)
Paths an attacker could take to deploy ransomware.
Operations & OpsAccount Takeover (Attack Tree)
Attack paths to take over a bank account.
Operations & OpsData-Centre Break-in (Attack Tree)
Paths to gain physical access to a facility.
Operations & OpsWeb App Compromise (Attack Tree)
Paths to exfiltrate user data from a web app.
Operations & OpsIoT Device Hijack (Attack Tree)
Paths to take control of an IoT device.
Operations & OpsCard-Not-Present Fraud (Attack Tree)
Getting card data, defeating step-up authentication and converting to value before chargeback, costed by attacker effort and detectability.
Risk & ReliabilityWater Treatment Dosing Attack (Attack Tree)
Paths to altering a coagulant dose setpoint at a water treatment works, from vendor VPN compromise to spoofing the residual analyser.
Risk & Reliability