An incident always has a timeline whether we see it clearly or not. Some are visible to the naked eye and some require an electron microscope. Different approaches exist like Cyber Kill Chain and I’d like to delve into the life of an attack and try to look at it from the analyst angle.