Threat Modelling (STRIDE / SDL)

Threat modelling is a structured Microsoft Security Development Lifecycle (SDL) practice for identifying, communicating, and mitigating threats early in design - before code is written, and re-applied whenever the design materially changes.

When to use

Designing a new system, significantly changing an existing one, evaluating an architecture for security, or running a formal security design review.

Do not use this skill for:

• Org-wide security architecture or roadmap (use security-architecture)
• Runtime detection or incident response (use sentinel / defender-xdr)
• Code-level vulnerability scanning (use SAST/DAST tooling)

STRIDE - the six categories at a glance