Anatomy of a
Rhysida
Intrusion
Single org · 8-hour kill chain · MITRE ATT&CK
00:00
incident time · of 08:00
Current ATT&CK tactic
Initial Access
TA0001
⏮
PAUSE
⏭
0.5×
1×
2×
4×
↺ RESTART
Incident status
stage 1 / 24
00:00
Dwell time
0
Hosts hit
0
Domain admin
0 GB
Data exfiltrated
intact
Backups
pending
Encryption
Kill chain
click a step to jump