TTPs

• Tactics, Techniques, and Procedures are the various ways to describe how an Adversary or APT attacks a target
  • Tactic: the goal or objective within the overall attack
    • e,g., reconnaissance, etc.
  • Technique: how the Adversary achieves the goal or objective
    • e.g., port scan
  • Procedure: how the technique is executed
    • e.g., Nmap

Metadata

Sources