Is kill chain preventive, detective or both? Solution both, The Cyber Kill Chain is an intrusion-based method that allows us to focus on the different stages of an attack . By implementing tools to prevent attacks at the different stages and identifying attacks in various stages, both detective and preventive measures can be used with kill chain method. By investing tools like suricata, a corporation will notice attacks earlier in the kill chain and stop AN attacker from establishing a foothold in one’s network. Once an attacker has established a foothold within the environment, AN attacker is very patient in accomplishing their mission. rather than solely police investigation attacks that reach the command and management stage of the kill chain, organizations ought to look into stopping these attacks earlier within the chain and start to maneuver towards a proactive defense with layered preventative and detective technologies. there\'s no solution in cybersecurity, but utilizing the defense-in-depth strategy can facilitate secure one’s surroundings from a range of attackers..