Tactics, Techniques, and Procedures (TTPs) is a comprehensive description of a cyber actor's behavior.

  • Tactic: the highest-level description of the cyber actor’s behavior.

  • Technique: gives a more detailed description of behavior in the context of a tactic.

  • Procedure: an even lower-level, highly detailed description in the context of a technique.

A good threat intelligence will provide TTPs, so the reader has a detailed understanding of the cyber attack. Then, the reader will be able to take right defensive measures.

TeamT5 is a leading brand in delivering Asia Pacific intelligence. We are established in Taiwan and harness our geographical & cultural strengths to assist enterprises and organizations in fortifying their cybersecurity defenses through our intelligence-focused offerings, including intelligence with TTP. This allows analysts to foresee potential threats & incidents and deliver action items for decision-makers to make accurate decisions and mitigate risks. Learn more: https://teamt5.org/en/products/threatvision/

*Reference: tactics, techniques, and procedures (TTP) - nist.gov