Threat Vector
Definition
The pathway or method a threat actor uses to gain access or cause harm. Examples include phishing email, unpatched software vulnerabilities, compromised third-party suppliers, and removable media. Distinct from the actor: the same vector can be used by different actor types.
- Definition
- Pathway used to gain access or cause harm
- Examples
- Phishing email, unpatched software, removable media
- Distinct from
- The actor who uses it
- Reusability
- Same vector used by different actor types
Common questions
Why separate the vector from the actor in incident analysis?+
Understanding the vector, such as a phishing email, tells defenders what control failed and needs hardening, independent of who exploited it, because the same weakness can be reused by unrelated actors later.
Can a single incident involve multiple threat vectors?+
Yes, an initial compromise vector such as phishing is often followed by a separate vector, such as an unpatched internal system, used for lateral movement, so response typically maps the full chain rather than one entry point.
Related terms
- Advanced Persistent Threat (APT)
- A category of attacker, typically nation-state or state-sponsored, characterised by high technical capability, long dwell times, specific targets, and disciplined operational security....
- Insider Threat
- An incident originating from a person with legitimate access to an organisation's systems, whether through malicious intent (data theft, sabotage) or negligence...
- MITRE ATT&CK
- A publicly available knowledge base of adversary tactics, techniques, and procedures derived from real-world intrusion observations. Maintained by the MITRE Corporation. Techniques...
- Threat Actor
- An individual or group responsible for a security incident or malicious campaign. Threat actors are categorised by motivation (financial, espionage, hacktivism, destruction)...
- Threat Intelligence
- Processed, analysed information about adversaries, their capabilities, and their current or anticipated activities. Includes strategic intelligence (actor motivations and trends) and tactical...