Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
The Diamond Model analyzes intrusions via four linked features, adversary, capability, infrastructure, and victim, enabling analysts to pivot across intelligence.
Diamond Model of Intrusion Analysis Definition: The Diamond Model analyzes intrusions via four linked features, adversary, capability, infrastructure, and victim, enabling analysts to pivot across intelligence.
The Diamond Model of Intrusion Analysis is a framework that describes each intrusion event using four core features: adversary, capability, infrastructure, and victim, connected by edges that show relationships between them. By documenting and linking these features, analysts can pivot from one known element to discover others, building a richer picture of a campaign and the threat actor behind it. It is often paired with the Cyber Kill Chain to map both how an attack progresses and who is conducting it.
Diamond Model of Intrusion Analysis is one of the topics you'll master in the Security+ Boot Camp.
Security+ Boot Camp →