TheDiamond Model of Intrusion Analysisconsists offour core attributes:
* Adversary- The threat actor behind the attack.
* Capability- The tools and techniques used.
* Infrastructure- The systems used by the adversary (e.g., botnets, C2 servers).
* Victim- The target of the attack.
* Option A (Delivery)andOption B (Weaponization)are part of theCyber Kill Chain, not the Diamond Model.
* Option C (Command and control)is an attack phase butnot a core attribute of the Diamond Model.
* Option D (Capability) is correct, as it represents the tools and attack methods used by adversaries.
Thus,D is the correct answer.