XDR Kill Chain™
See everything, detect everything
The XDR Kill Chain is a fully compatible MITRE ATT&CK framework kill chain that is designed to characterize every aspect of modern attacks while remaining intuitive to understand. All Stellar Cyber Alert Types are aligned to the XDR Kill Chain out of the box, so you can start detecting full attack progressions, immediately.
XDR Kill Chain Design
Older kill chains like the Lockheed Martin Cyber Kill Chain are outdated, but newer frameworks like MITRE ATT&CK, while powerful, do not fully characterize attacks in a way that an XDR platform requires. The XDR Kill Chain solves these problems and is purpose-built for XDR.
Covers all malware-related detections
XDR Network Behavior Analytics (NBA)
Covers network anomaly detections
Covers all threat intelligence-related detections
XDR Endpoint Behavior Analytics (EBA)
Covers all host-based anomaly detections
XDR User Behavior Analytics (UBA)
Covers user anomaly detections
XDR Sensor Behavior Analytics (SBA)
Covers injection anomaly detections
on the operational side