# Cyber Kill Chain The Cyber Kill Chain is a lifecycle model that organizes an intrusion into stages such as reconnaissance, weaponization, delivery, exploitation, installation, command and control, and actions on objectives. ## Use and limitation The model helps defenders identify opportunities to interrupt an operation. It is less effective when treated as a rigid chronological sequence, especially for insider activity, identity compromise, cloud abuse, or persistent access that skips or revisits stages. [[Index - Stages of Interception]] uses a different axis: vertical layers of authority rather than chronological attack steps. ## Relationships [[MITRE ATT&CK]] · [[Threat Modeling]] · [[Attack Surface]] · [[Persistence Mechanism]].