---
type: "term"
title: "TTP (Tactics, Techniques, and Procedures)"
description: "A detailed description of attacker behavior."
resource: "tlctc:term:ttp-tactics-techniques-and-procedures"
tags:
  - "glossary"
---
# TTP (Tactics, Techniques, and Procedures)

A detailed description of attacker behavior. In the TLCTC framework, specific TTPs (like those in MITRE ATT&CK) are considered instances or sub-threats that are categorized under the broader, cause-oriented Top Level Cyber Threat Clusters.