+1 coinfor reading to the end
+1
Home / Glossary / TTP
Glossary · Security

TTP

Tactics, Techniques, and Procedures

In plain language

A description of how attackers operate: what they aim for, the methods they use and the steps they follow.

The metaphor

Like a burglar's known habits: how they scout, how they break in and what they take.

Going deeper

How it works

  • Tactics are the goals.
  • Techniques are the methods.
  • Procedures are the exact steps.
  • Security teams use them to spot and block repeat attackers.
In practice
  • A report describes how a ransomware group works.
  • A team checks logs for a known attacker pattern.
  • A training session walks through a typical attack.

A question owners ask

Why does it matter?

Knowing the pattern helps block the next attempt. Your provider uses it in their security tools.

Related terms
AAAAuthentication, Authorization, and AccountingAccount takeoverACLAccess Control ListAdmin accountAESAdvanced Encryption StandardAES-256Advanced Encryption Standards 256-bitAISAutomated Indicator SharingAPTAdvanced Persistent Threat

Something here sounds like your problem?

Every WILDCARD card exists to solve one named problem. Find yours.

Pick your problem →