There's an argument that fault trees and attack trees are different approaches. I find fault (hah) with that argument. Ultimately, they're the same, just applied slightly differently. Both are a straightforward method to either attempt to predict and prevent an undesirable outcome, or to diagnose one