What is Attack Chain?
In this glossary, Attack Chain refers to: A sequence of steps or techniques used by threat actors to exploit cryptographic or PKI weaknesses, progressing from initial access through privilege escalation to final impact.
How is Attack Chain used in cybersecurity?
In cybersecurity communication, this term appears in contexts such as: "Mapping the attack chain in a PKI breach helps responders identify every stage from phishing to certificate abuse."
Why does Attack Chain matter in cybersecurity?
Attack Chain matters because it supports clear communication in Vulnerability Management contexts for SOC Analysts, Security Engineers, and Incident Responders. It also connects to aviation training and exam language such as CISSP, CompTIA Security+, and CEH.
Who uses Attack Chain?
Attack Chain is mainly used by SOC Analysts, Security Engineers, and Incident Responders.
What category does Attack Chain belong to?
In this glossary, Attack Chain is grouped under Vulnerability Management. Related pages in this category explain adjacent procedures, commands and operational concepts.
Where does this definition come from?
This definition is sourced from ISO 27001, NIST Cybersecurity Framework, MITRE ATT&CK and published by Protermify Cybersecurity as a static cybersecurity reference page.