I found this approach to threat modeling really helpful and interesting.

Click to access nodirt.pdf