What are TTPs - Tactics, Techniques, and Procedures?

Tactics, techniques, and procedures (TTPs) define how hackers orchestrate and manage attacks.

These are representations of the typical behavior, or modus operandi, of cyber adversaries. For instance, certain hacking groups use certain tools and behave in certain ways. Understanding the TTPs of threat actors is a critical element to effective cyber defense and incident response. TTPs can be a part of cyber threat intelligence.