liveBook · Manning

Technique

A technique is a deliberate, systematic, and repeatable method for performing a task, solving a problem, or achieving a desired result.

How 2 Manning books explain it

Azure Security

A detailed method a bad actor uses to carry out a tactic.

How it is used
Uses techniques to interpret bad-actor behavior, anticipate compromise, and improve security preparedness.
How deep it goes
Defines technique within the goal-tactic-technique-procedure hierarchy and stops short of describing a specific cyber technique.
Examples
Uses a fitness routine to distinguish goals, tactics, techniques, and procedures.
What you can do after
Evaluate/understand bad-actor behavior and use it to anticipate threats.

Read how Azure Security explains technique →

Cyber Threat Hunting

A technique in the ATT&CK framework is an action or method an adversary performs to achieve a tactical goal.

How it is used
Guides security-monitoring detection rules and threat-hunting hypotheses by linking adversary actions to tactical goals.
How deep it goes
Distinguishes tactics, techniques, subtechniques, and procedures, but does not detail detection implementation beyond examples.
Examples
Uses credential dumping, PowerShell, Windows Command Shell, and APT41’s certutil download command as examples.
What you can do after
Apply ATT&CK techniques to frame detection rules and formulate threat-hunting hypotheses.

Read how Cyber Threat Hunting explains technique →

Related concepts

These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.