When to activate: threat modeling, STRIDE, PASTA, attack tree, DFD, security design review, threat analysis
