11How do attack trees and kill chains help in threat modelling, and where do they mislead?▼mediumNewMicrosoftGoogleAmazon◆ premiumTwo classic tools that structure attacker thinking. The scored answer uses each for what it is good at and names the blind spots before an interviewer does.Open full answer →
28How do real intrusions unfold from first access to impact, and where should a defender spend effort to stay ahead of attackers?▼mediumNewCrowdStrikeGoogleMicrosoft◆ premiumAttackers are not wizards; they repeat a small number of moves because those moves keep working. The answer names the moves and the choke points where one control breaks many intrusions.Open full answer →
21How does malware work end to end on a desktop or server, from delivery to impact, and where can defenders see and stop each stage?▼easyNewCrowdStrikeMicrosoftPalo Alto Networks◆ premiumMalware is just software that does what its operator wants on your machine. Every stage leaves evidence, and every stage has a control that can stop it.Open full answer →
28Map a multi-stage indirect prompt injection onto a kill chain. Where would you place detections and controls at each stage?▼hardNew◆ premiumUse the seven-stage research framework without forcing every incident through every stage. Work a partial trace, model alternate paths and separate stored state from observed downstream influence.Open full answer →