You should start by reading the paper about The Diamond Model https://www.activeresponse.org/wp-content/uploads/2013/07/diamond.pdf The Diamond Model This model discusses the relationships of four basic components. Adversary, Capability, Infrastructure and Victim. The model is split into 7 Axioms with the first one stating: