DATA SHEETBreakthroughs for DefendersXDR Kill ChainTM – Full visibility across the entire attack surface minimizing enterprise security risk

Modern Attacks Need Modern Thinking

Stellar Cyber’s XDR Kill Chain –delivering the promise of EVERTHING
detection and Response
The XDR Kill Chain is a fully MITRE ATT&CK compatible
kill chain that is designed to characterize every aspect ofmodern attacks while remaining intuitive to understand.
All Stellar Cyber alert types are aligned to the XDR KillChain out of the box, so you can start detecting fullattack progressions immediately.

First new kill chain invented in years – designed specifically for
XDR detections, where threats can attack any point in theinfrastructure.
Loop interface prioritizes detections into five phases: initialattempts, persistent foothold, exploration, propagation, andexfiltration / impact – analysts can easily see attacks as they
happen and respond to the most emergent needs first.
Captures the progression of complex attacks – alerts appear in thecontext of the five-phase kill chain so analysts can easily prioritize
them without getting lost in details.
Incorporates commonly used MITRE ATT&CK framework fordetailed analysis and adds new tactics and techniques beyond theMITRE ATT&CK framework.
Clearly shows external vs. internal attacks – helps analysts know
exactly where to look to stop attackers.

www.stellarcyber.ai | sales@stellarcyber.ai

Propagation:
Follow the attacker as they
go to more valuable rooms
and discover the treasure

Exploration:
The attacker studying what
is inside your company, suchas how many rooms thishouse has, and where thetreasure is

Initial Attempts:
See the efforts of anattacker trying to get into
the door of your company,
the house

Persistent Foothold:Track the attacker trying
to make your company
their home and live in yourenvironment persistently

Exfiltration & Impact:
The attacker tries toget the treasure out ofyour company, or destroys
that treasure while they
are insidewww.stellarcyber.ai | sales@stellarcyber.ai

STELLAR CYBER XDR KILL CHAIN

Holistic security posture monitoring in one intuitive dashboard
XDR Kill
Chain Stage

InitialAttempts

PersistentFoothold

Exploration

Propagation

XDR
ExtendedDetections

External XDR
NBA, External
UBA, XDR SBA

External XDR
NBA, External
UBA, XDR SBA

External XDRMalware,
XDR Intel,
XDR EBAInternal
XDR NBA

MITRE
Tactics

Reconnaissance,
Resource
Development,
Initial Access,
External
Credential Access

Execution,
Persistence,
DefenseEvasion,Commandand Control

Discovery,
Collection

Internal
Credential
Access,Privilege
Escalation,
LateralMovement

Exfiltration& Impact

Exfiltration,
ImpactXDR Malware
Covers all malware-related detections

XDR Network Behavior Analytics (NBA)Covers network anomaly detections

XDR Intel
Covers all threat intelligence-related detections

XDR Endpoint Behavior Analytics (EBA)
Covers all host-based anomaly detections

XDR User Behavior Analytics (UBA)
Covers user anomaly detections

XDR Sensor Behavior Analytics (SBA)
Covers injection anomaly detections
on the operational side

www.stellarcyber.ai | sales@stellarcyber.ai

WHY STELLAR CYBER’S XDR KILL CHAIN PROVIDES BETTER RISK REDUCTION

Lockheed Martin Cyber Kill Chain

XDR Kill Chain

Outdated, created 2011

Created 2021, up to date

Malware centric

General enough for all detections

Prior MITRE ATT&CK, not compatible with ATT&CKMITRE ATT&CK native by design

Cannot differentiate between internal / external attacks

Built-in external versus internal / lateral attack distinction

Linear, did not capture complex attack progression

Better capture for complex multi-stage attacks with loop design

Lack of tagging, cannot categorize hot trends

Multi-tag-based categories, easier to capture hot trends
such as ransomware

www.stellarcyber.ai | sales@stellarcyber.ai