Applying the Kill Chain and Diamond Models to Microsoft Advanced Threat Analytics
The Diamond Model of Intrusion Analysis A Summary By Sergio Caltagirone