Framework View

Kill Chain Phases — Roles

Understand how High Value Target Roles function across pre-compromise, compromise, and post-compromise phases of an attack.

Pre-compromise: roles with external exposure and privileged access become primary targets during adversary reconnaissance and initial access.

Compromise: roles storing secrets or controlling communications determine how far an adversary can penetrate during active intrusion.

Post-compromise: roles with inhibit-restore or widespread presence authority enable adversary persistence and operational disruption.

Framework View

Understand how High Value Target Roles function across pre-compromise, compromise, and post-compromise phases of an attack.

Pre-compromise: roles with external exposure and privileged access become primary targets during adversary reconnaissance and initial access.

Compromise: roles storing secrets or controlling communications determine how far an adversary can penetrate during active intrusion.

Post-compromise: roles with inhibit-restore or widespread presence authority enable adversary persistence and operational disruption.

Build a more defensible resilience capability.