Which of the following attributes is part of the Diamond Model of Intrusion Analysis?

TheDiamond Model of Intrusion Analysisconsists offour core attributes:

Adversary– The threat actor behind the attack.

Capability– The tools and techniques used.

Infrastructure– The systems used by the adversary (e.g., botnets, C2 servers).

Victim– The target of the attack​.

Option A (Delivery)andOption B (Weaponization)are part of theCyber Kill Chain, not the Diamond Model.

Option C (Command and control)is an attack phase butnot a core attribute of the Diamond Model.

Option D (Capability) is correct, as it represents the tools and attack methods used by adversaries.

Thus,D is the correct answer.