Which threat-hunting concept is primarily focused on identifying a malicious actor’s behaviors?
Tactics, techniques, and procedures (TTPs) describe an adversary’s behavioral patterns and methods for achieving objectives. They support detection and hunting based on how an actor operates rather than on individual compromise artifacts.
Community Discussion