Arrange these broad advanced persistent threat (APT) stages in the sequence presented in the course: data exfiltration, initial compromise, lateral movement, establishment of presence.

### The order 1. **Initial compromise**: The actor first gains a foothold through a route such as spear-phishing or exploiting a weakness. 2. **Establishment of presence**: The actor creates persistence or escalates privileges to maintain access. 3. **Lateral movement**: The actor moves through the environment toward valuable systems or information. 4. **Data exfiltration**: The actor removes information after locating and accessing it. ### The concept An advanced persistent threat often involves a sequence of deliberate actions rather than a single event. The exact path can vary, and defenders may detect activity at any stage. Segmentation and monitoring can restrict or reveal movement, while investigation seeks to determine how far the actor progressed. ### Terms - **APT**: Advanced persistent threat. - **Data exfiltration**: Unauthorized removal or transfer of information from an environment. ### Remember An attacker generally needs access and reach before extracting the target data.