An organization experienced multiple compromises of endpoints, leading to breaches of systems and data.

Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege (STRIDE)

Zero Trust (ZT) threat modeling

Operationally Critical Threat, Asset, and Vulnerability Evaluation (OCTAVE)

Process for Attack Simulation and Threat Analysis (PASTA)