Tactics, Techniques, and Procedures

A framework for describing adversary behavior at three levels. Tactics are the attacker's goals (initial access, persistence). Techniques are how they achieve those goals (phishing, scheduled tasks). Procedures are the specific implementation details. TTPs form the foundation of threat intelligence analysis.

Definição editorial da DecipherU. Para definições técnicas autoritativas, consulte NIST, ISO, ou o órgão normativo correspondente.