So there is a new model making the rounds on the interwebs as an update to the well known Cyber “Kill-Chain” recently. I think its a reasonable model and makes sense. Forgetting there is an underlying corporate message from Carbon Black here, the general notion that this is more of an iterative loop than a chain is a decent evolution in looking at something like this.
Link to PDF that most of these articles are based. (warning – Carbon Black landing page). I have used their products, but am not endorsing anything 🙂
https://www.carbonblack.com/wp-content/uploads/2019/06/CB-WP-Cognitions-of-a-Cybercriminal.pdf