Tactics, Techniques & Procedures (TTPs)

Tactics, techniques, and procedures (TTPs) outline the specific methods, patterns of behavior, and operational approaches used by cyber adversaries during various stages of an attack, from reconnaissance to achieving their objectives. Understanding attacker TTPs—such as common phishing strategies, social engineering maneuvers, or malware deployment methods—is fundamental for developing effective defensive strategies and incident response plans. Security awareness training directly addresses many TTPs by educating users to recognize and thwart these malicious approaches targeting the human element.