Definition[]
Tactics, techniques, and procedures (TTP) (also called tactical threat intelligence) is "information about how threat actors are conducting attacks."[1]
Tactics, techniques, and procedures (TTP) is
“ | [t]he behavior of an actor. A tactic is the highest-level description of the behavior; techniques provide a more detailed description of the behavior in the context of a tactic; and procedures provide a lower-level, highly detailed description of the behavior in the context of a technique.[2] | ” |
References[]
- ↑ ThreatConnect Glossary (full-text).
- ↑ NIST Special Publication 800-171B, App. B, at 51.