Attack Tree Construction skill: what it does and how to install it

What it does. Builds hierarchical attack paths from a defined attacker goal, using OR, AND and leaf nodes to show alternative or dependent steps. Records cost, time, skill and detection likelihood for each attack, then uses the tree to expose gaps, prioritise defences and communicate risk.

When to use it. For threat modelling, penetration-test planning, security architecture reviews and defensive investment decisions. It also supports reviewing insider and external attack paths and keeping the analysis current.