Cybersecurity and Response Planningintermediate
Place the seven stages of the Mandiant Cyber Attack Lifecycle in chronological order from earliest to latest.
Answer
Initial Compromise, Establish Foothold, Escalate Privileges, Internal Reconnaissance, Move Laterally, Maintain Presence, Complete Mission
Explanation
### The order
1. **Reconnaissance.** The attacker gathers information about the target before attempting entry.
2. **Initial compromise.** The attacker first gains entry.
3. **Establish foothold.** The attacker creates a continuing position in the environment.
4. **Escalate privileges.** The attacker seeks greater access.
5. **Internal reconnaissance.** The attacker learns about connected systems inside the environment.
6. **Move laterally.** The attacker moves through the environment to other systems.
7. **Complete mission.** The attacker pursues the intended outcome, such as stealing or damaging data.
### Terms
- **Privilege**: The access or authority available to an account.
- **Lateral movement**: Movement from one system or area of an environment to another.
### Remember
The sequence moves from preparation and entry toward expanded access and mission completion.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free