Threat intelligence and analysis

TTPs

TTP stands for tactics, techniques and procedures, and refers to the typical way various threat actors carry out their cyberattacks. ‘Tactics’ are their general strategies, ‘techniques’ are the tools used, and ‘procedures’ are the steps followed. Using TTPs, cybersecurity teams can better predict and detect attacks, as well as build more effective defenses against them.