Threat modelling frameworks

The frameworks all ask the same four questions: what are we building, what can go wrong, what will we do about it, and did we do a good job.

STRIDE, PASTA and LINDDUN differ in what they prompt you to think about, threats to a system, attack simulation, privacy specifically. The choice matters less than actually asking the questions, and the most common failure is not picking the wrong framework but never running the exercise at all.