Describing attacks with crime script analysis

Cisco Talos researcher Martin explains how crime script analysis describes attacks in everyday language, aiding communication and identifying disruption points.

Cisco Talos published a methodology piece on applying crime script analysis to cybersecurity incidents. The approach describes each stage of an attack in everyday language, making technical incidents accessible to non-technical audiences. It also helps defenders identify points in the attack chain where the crime can be disrupted.

• Crime script analysis maps attacks as sequential stages
• Technique translates technical incidents for non-technical stakeholders
• Highlights intervention points across the attack chain