The IT Law Wiki
Register
Advertisement

Definition[]

Tactics, techniques, and procedures (TTP) (also called tactical threat intelligence) is "information about how threat actors are conducting attacks."[1]

Tactics, techniques, and procedures (TTP) is

[t]he behavior of an actor. A tactic is the highest-level description of the behavior; techniques provide a more detailed description of the behavior in the context of a tactic; and procedures provide a lower-level, highly detailed description of the behavior in the context of a technique.[2]

References[]

  1. ThreatConnect Glossary (full-text).
  2. NIST Special Publication 800-171B, App. B, at 51.
Advertisement