QuestionQ12

Security Concepts

An employee receives an email attachment from a suspicious source and chooses not to open it. Following further investigation, a security analyst determines that the file is malware. Which Cyber Kill Chain category does this event fall under?

Explanation

Delivery is the Cyber Kill Chain phase in which an adversary sends a malicious payload to a target, such as through an email attachment. The attachment was delivered but was not opened, so exploitation and installation did not occur.

Community Discussion

No comments yet. Be the first to start the discussion!