The cyber defenders kill chain emphasises the different stages of an attack in a manner relevant to defenders. It’s central to how we, at Lab539, craft effective tailored cyber defences that protect critical functions.

Adversarial tradecraft is not rigid, it can and does evolve. Spending more time studying adversaries is not unhelpful but we much prefer to keep things on our own terms, to control how adversaries must operate, and the tradecraft they must use. This is the first of a series of posts on our thinking and how we look at things a little differently in order to achieve that elusive feeling of confidence in our defences.