Use the interactive kill plane below to explore and study the different malicious campaigns. This page will be gradually updated to include more use cases.
This two-dimensional enrichment can increase both the granularity and visibility when describing attack vectors and campaigns. TTP descriptions and narratives would be appropriately developed to capture, communicate, and study attacks on a sociotechnical level. The resulting ’sociotechnical kill chain’ will maintain compatibility with the traditional CKC by projecting the campaign on the CKC axis or in the zero click zone.
The zero-click zone serves two purposes. First, this acts as a placeholder to include phases of the attack that have not been mapped or have not been mapped yet on the HKC during an incident investigation. Second, it captures the technical phases of the attack that do not require user interaction for the underlying attack vector to progress. The sociotechnical kill plane is illustrated in the diagram below, and includes representative attack vectors to showcase its use.
