Tactics, Techniques, and Procedures

A framework for describing adversary behavior at three levels. Tactics are the attacker's goals (initial access, persistence). Techniques are how they achieve those goals (phishing, scheduled tasks). Procedures are the specific implementation details. TTPs form the foundation of threat intelligence analysis.

Definición editorial de DecipherU. Para definiciones técnicas autorizadas, consulta NIST, ISO, o el organismo de normalización correspondiente.