One thing to bear in mind: the closer to the start of your chain you'll be able to cease an attack, the significantly less costly and time-consuming the cleanup might be. Therefore, they will be a lot more suspicious of spearphishing strategies. Note that not all procedures can be mitigated. https://bookmarkinglive.com/story17727038/cyber-attack-model-no-further-a-mystery