What is the Diamond Model of Intrusion Analysis in cybersecurity

The Diamond Model of Intrusion Analysis is a cybersecurity framework that helps identify cyberattack perpetrators, their tactics, and how to respond. It was proposed by Sergio Caltagirone, Andrew Pendergast, and Christopher Betz in 2013. The model focuses on four components of a cyberattack: the adversaries, infrastructure, capabilities, and victims. It helps visualize complex attack scenarios, guiding analysts to explore different links and patterns.