What are TTPs? In cybersecurity TTP stands for Tactics, Techniques and Procedures.
A Tactic is the objective of a cyber adversary, for example gaining initial access or escalating privileges.
A Technique is the method used to achieve a Tactic.
A Procedure is a technique, or combination of techniques, observed being used in the real world.