What are TTPs? In cybersecurity TTP stands for Tactics, Techniques and Procedures.

A Tactic is the objective of a cyber adversary, for example gaining initial access or escalating privileges.

A Technique is the method used to achieve a Tactic.

A Procedure is a technique, or combination of techniques, observed being used in the real world.