Cognitive Scaffold

Preparing your thinking workspace

arrow_back_ios_new
MENTAL MODEL · M2711

Kill Chain

Kill Chain
TechnicalHigh supportCybersecurity
Included
account_tree

Version 1.0.0 · Updated 2026-07-30

CORE DEFINITION

The sequence of ordered steps an attack must go through: reconnaissance, weaponization, delivery, exploitation, installation, command and control, and actions on objectives. The defender can render the attack ineffective by breaking any one link in the chain.

SCAFFOLDING EFFECT

psychology

Reduce cognitive load

- Defense in depth: don't just guard the front door. In business competition or cyber defense, set obstacles at every stage of the attack chain. Even if the adversary gets in, they can't take the data out.

anchor

Anchor fast decisions

Break an attack (especially cyber or military) into several sequential phases (e.g., reconnaissance, weaponization, delivery, exploitation, installation, command and control, actions on objectives), and intercepting at any layer can break the entire chain.

MINIMUM ACTION

In progress 0/3

Practice this model in one real situation:

Check to track your progress (stored locally)
Learning progress0%
account_treeGenealogyexpand_more
menu_bookReferencesexpand_more

Source support: Explicit

  • link
    en.wikipedia.orghttps://en.wikipedia.org/wiki/Kill_ChainZH · Explicit
    verified

RELATED MODELS

Related model

Elastic Defense

Defence in depth (also known as deep defence or elastic defence) is a military strategy that seeks to delay rather than prevent the advance of an attacker, buying time and causing additional casualties by yielding space. Rather than defeating an attacker with a single, strong defensive line, defence…

arrow_forwardRelated model

Whaling

Whaling is the hunting of whales for their products such as meat and blubber, which can be turned into a type of oil that was important in the Industrial Revolution. Although it remains unclear where whaling was practiced as an organized industry for the first time, the earliest documentation demons…

arrow_forwardRelated model

Greyballing

A tool developed by Uber that showed fake vehicle locations and ghost cars to individuals identified as 'regulatory enforcement officers' or 'malicious users', thereby evading regulation.

arrow_forward