A path or route used by the adversary to gain access to the target (asset) Scope Note: There are two types of attack vectors: ingress and egress (also known as data exfiltration)

ISACA Glossary [Information Systems Audit and Control Association ]