Nation-state operations

Hand-drawn sketch: The one that waits. Some adversaries are resourced and patient in ways commercial crime is not, pursuing objectives where there is no payment to refuse.

Some adversaries have time, budget and patience that commercial defences are not designed around.

They will spend months, use techniques nobody has seen, and accept a slow approach because there is no quarterly target. For most organisations this is not the relevant threat and being treated as if it were produces wasted spending. For a small number it is, and the honest answer there is usually about detection and resilience rather than prevention.

Checked against the primary source.

Nation-state operations

More on Threat actors & ATT&CK