Did you know SAM understands Diamond Model Analysis? You can ask Sam to create a report on a violation, something that usually takes a LOT of time to do manually.
While working a Violation, Ask Sam:
Please prepare a diamond model analysis
or
For this incident, build a Diamond Model. Identify the Adversary, Infrastructure, Capability, and Victim — and map any observed TTPs to each vertex.
And you will get back a comprehensive report like below - you can of course fine tune your prompt for verbosity and content.
What are your favorite SAM questions? Please share!
