Which threat modeling standard encompasses various phases of the attack lifecycle, from planning to execution?

Question

Options

• AMITRE CAPEC
• BTaHiTI
• CPASTA
• DAll of the above

• A
  78% (18)
• B
  13% (3)
• C
  4% (1)
• D
  4% (1)

Explanation

MITRE CAPEC (Common Attack Pattern Enumeration and Classification) is correct because it systematically catalogs attack patterns across the full attack lifecycle - covering attacker prerequisites, planning, and step-by-step execution flows - making it uniquely suited for modeling how attacks unfold from start to finish.

Why the distractors are wrong:

• TaHiTI is a threat hunting methodology, not a threat modeling standard focused on attack lifecycle phases; it's designed to structure how defenders search for threats, not enumerate attacker actions.
• PASTA (Process for Attack Simulation and Threat Analysis) is a risk-centric threat modeling process focused on business impact and vulnerability analysis, not on cataloging attacker lifecycle phases comprehensively.
• "All of the above" fails because neither TaHiTI nor PASTA specifically characterize attack patterns across planning-to-execution phases the way CAPEC does.

Memory tip: Think CAPEC = "C"aptures Attack Patterns End-to-end Completely - it's the MITRE framework that maps how attackers operate across every phase, while ATT&CK maps what they do in the wild post-compromise.

No community discussion yet for this question.