20 May 2022 The Kroll Intrusion Lifecycle: a visual framework for understanding threat actor behaviour