Section III

Modern kill chain

The 'kill chain' is the doctrinal framework describing how a target is discovered, fixed, hit and assessed. Understanding it is essential for defence: it means knowing how you are observed, and where the enemy cycle can be broken. This chapter is entirely defensive — it describes the cycle to avoid it, NOT to employ it.

Kill chain phases (F2T2EA)

The NATO acronym F2T2EA describes the standard cycle: Find, Fix, Track, Target, Engage, Assess. On the Ukrainian front the cycle closes in times ranging from minutes to seconds thanks to drone-artillery-EW integration.

PhaseMeaningTypical means
FindDiscover target existenceISR drone, SIGINT, OSINT, ground observer
FixLocate preciselyDF triangulation, drone telemetry, observation intersection
TrackMaintain movement awarenessContinuous drone overflight, SIGINT monitoring
TargetDecide engagement, choose meansC2 (Command & Control), effect / resource assessment
EngageStrikeArtillery, FPV, missile, loitering munition
AssessEvaluate effect, repeat if neededPost-impact drone, BDA (Battle Damage Assessment)

Cycle compression on the Ukrainian front

The distinctive feature of the 2022-2026 front is temporal compression of the cycle. What previously took hours or days now closes in a few minutes.

  • Find: Mavic ISR drone over area, cost $5,000, range 10+ km
  • Fix: drone pilot passes MGRS to firing unit via Kropyva / Delta
  • Track: drone stays airborne, confirms position, provides correction
  • Target: firing decision within 1-3 minutes via digital kill chain
  • Engage: 152 mm artillery fires within 1-2 minutes; FPV in 5-10 minutes if available
  • Assess: drone observes impact, decides second salvo if needed
Mean observed time

On active front, Find-to-Engage cycle measured by OSINT across many publicly documented incidents is 2-15 minutes from discovery to first impact. It is the key metric of the era.

The drone-artillery cycle

Drone-artillery integration is the technical engine of the modern kill chain. Understanding it as target is the key to defensively breaking it.

  • ISR drone (Mavic, Autel, Orlan-10): observes, identifies, geolocates
  • Datalink: sends coordinates to fires centre via encrypted radio or military app
  • Management system (Ukrainian Kropyva, Russian equivalents): computes firing data
  • Artillery: fires within brigade-expected time
  • Spotter: drone stays airborne, communicates corrections round-by-round
  • Continuous loop: drone stays over area until target neutralised
What it means for the one underneath

If you were 'seen' by a drone, you have 2-15 minutes to leave the lethal centre (50-100 m radius). If you do not move, impact comes. If you move predictably, the drone updates coordinates.

Defensive kill-chain breakpoints

Defensively, every phase of the kill chain is an opportunity to be missed. You do not need to break the whole chain — one link is enough.

Enemy phaseFriendly defensive break
FindOPSEC: no smartphone, no photos, dispersion, no recurring pattern of life
FixMobility: frequent position change, thermal camo, overhead cover
TrackFriendly anti-drone EW, observation cover, multiple hides
TargetSaturate enemy C2 with multiple small presences instead of one priority cluster
EngageOverhead cover, physical dispersion, anti-drone netting on vehicles
AssessReduce post-impact emissions, never confirm BDA in clear, move away

Inverse kill chain: breaking your own visibility

  1. Pre-Find: never be a discoverable target — OPSEC discipline, dispersion, multi-domain camo
  2. If Find happened: break Fix with immediate movement, cover, deception
  3. If Track is ongoing: find overhead cover, reduce emissions, wait for window (weather, friendly EW)
  4. If Target is processing: move away from known position within 5-10 minutes
  5. If Engage is imminent: seek overhead protection, dispersion, alternate firing position
  6. Post-Engage: move, reduce emissions, confirm nothing, reassess picture

Enemy-side kill chain — awareness

Knowing how the enemy kill chain works is defensive information, not offensive. It means knowing its weaknesses and when to expect what.

  • Russian dependence on Orlan-10 / Zala for ISR — downed reduce local kill-chain tempo
  • Ukrainian dependence on Mavic / Autel — vulnerable to Russian EW, but fiber-optic backups expanding
  • Reaction times: Russian artillery slower on deep targeting, Ukrainian faster with HIMARS PGM
  • Saturation: enemy C2 has limited capacity to handle many targets — saturating it is legitimate defensive strategy
  • Night: night kill chain depends on thermal, useful window under certain weather
  • Pattern: drone flight hours are pattern-of-life exploitable defensively

Common mistakes

  • Thinking kill chain requires hours — on Ukrainian front it is minutes
  • Staying in position because "we haven't been hit so far" (enemy Assess is coming)
  • Confirming evasion of an attack on radio (Engage failed = Assess in progress)
  • Underestimating "small" ISR drones — Mavic is the main Find/Fix node
  • Neglecting OPSEC because "we are far from the front" — OSINT kill chain reaches everywhere
  • Concentrating defence only on final Engage rather than breaking cycle earlier

Lessons learned Ukraine

The 2022-2026 front turned the kill chain into a daily operational metric. Surviving brigades structured defence around breaking specific links: anti-drone EW to break Find/Fix, thermal cover to break Track, dispersion and overhead cover to limit Engage effect, post-impact discipline to deny Assess. Operational synthesis: 'Artillery doesn't kill anymore — the kill chain kills. Artillery is only the last step.' Whoever understands the chain lives. Whoever doesn't dies at Engage having never perceived the previous four phases.