---
type: "term"
title: "Velocity Annotation"
description: "Notation: →[Δt=value] or →[Δt=Xh] , →[Δt=Xm] , →[Δt=Xs] ."
resource: "tlctc:term:velocity-annotation"
tags:
  - "glossary"
---
# Velocity Annotation

Notation: `→[Δt=value]` or `→[Δt=Xh]`, `→[Δt=Xm]`, `→[Δt=Xs]`. Indicates the observed or estimated time interval between one Attack Step and the next. Velocity annotations are OPTIONAL but RECOMMENDED for operational analysis and threat intelligence sharing.

**Reference:** §4.2.2 (Global Definitions), §11.5.2, §12.2 (Δt Notation)