An engineer is considering appropriate risk responses using threat modeling. The engineer is trying to understand which threat actors are in scope for their organization.

How does threat modeling identify the principal risks and tactics, techniques, and procedures $($TTPs$)$ for which their system may be susceptible? $($Select three.$)$

Through using tools such as diagrams

By attempting to gain physical access to the target location

By modeling hardware or software used for the attack

By impersonating an employee in the organization

By evaluating a system from a neutral perspective

By analyzing the system from the defender's perspective

By evaluating the system from an attacker's point of view