Each letter violates a security property (authenticity, integrity, non-repudiation, confidentiality, availability, authorization). You apply the six questions to every element of a diagram.
STRIDE
A checklist of six threat categories: Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, Elevation of privilege.