---
type: "term"
title: "Sequence"
description: "The ordered progression of threat clusters in an attack."
resource: "tlctc:term:sequence"
tags:
  - "glossary"
---
# Sequence

The ordered progression of threat clusters in an attack. The TLCTC framework recognizes that identified Top-Level Threats must also be seen as sequence components in the attack scenario, with attackers using these components in varying orders depending on their script (Axiom VIII). Example: A phishing attack might follow #9→#3→#7, or a more complex attack might be #9→#7→#4→(#1+#7).