Diamond Model

An intrusion analysis framework that maps incidents across four vertices: adversary, capability, infrastructure, and victim. Used to structure threat intelligence analysis.