liveBook · Manning

Procedure

As explained in Azure Security

A highly detailed description of the specific steps and implementation details of a bad actor's technique.

A procedure is a highly detailed description of the specific steps a bad actor uses to carry out a technique. It describes behavior at an implementation level, helping defenders understand how a cyber threat may unfold. section 1.4

Procedure fits into the threat-behavior hierarchy:

  • A goal is the intended outcome, such as compromising Azure resources for financial gain. section 1.4
  • A tactic is the broad behavior used to pursue that goal. section 1.4
  • A technique provides more detail about the tactic, while a procedure specifies the repeatable steps used to execute it. section 1.4

Gym analogy

Losing weight represents the goal; adopting a healthier lifestyle represents the tactic; exercising more represents a technique; and repeating the steps for using an exercise machine represents a procedure. section 1.4

How Azure Security covers it

How deep it goes
Defines procedures within the goal-tactic-technique hierarchy but stops short of describing a specific attack implementation.
Examples
Uses repeated exercise-machine steps as an analogy for executing a technique.
What it assumes
Builds from zero by defining goals, tactics, techniques, and procedures as related levels of threat behavior.
What you can do after
Evaluate attacker behavior in greater detail and use it to anticipate threats and improve preparedness.
How it connects
Connects procedures with goals, tactics, techniques, and TTPs in analyzing bad-actor behavior.
Cover of Azure Security
liveBookmanning.com
Read Azure Security on liveBook Get the book at manning.com

Also explained in

Compare how 2 books explain procedure →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.