liveBook · Manning

Technique

As explained in Azure Security

A detailed method a bad actor uses to carry out a tactic.

A technique is a detailed method a bad actor uses to carry out a tactic and pursue a goal. Understanding techniques helps organizations anticipate behavior and strengthen protection. section 1.4

Place technique within the threat-behavior hierarchy:

  • Goal: the intended outcome a bad actor is trying to achieve. section 1.4
  • Tactic: the high-level behavior used to pursue the goal. section 1.4
  • Technique: a more detailed description of that tactic. section 1.4
  • Procedure: a highly detailed description of how the technique is performed. section 1.4

Analogy: improving fitness

A goal of losing weight can lead to the tactic of adopting a healthier lifestyle. Exercising more, eating differently, and tracking progress are techniques; the exact steps for using an exercise machine form a procedure. section 1.4

How Azure Security covers it

How deep it goes
Defines technique within the goal-tactic-technique-procedure hierarchy and stops short of describing a specific cyber technique.
Examples
Uses a fitness routine to distinguish goals, tactics, techniques, and procedures.
What it assumes
Teaches the goal-tactic-technique-procedure distinctions from their basic definitions.
What you can do after
Evaluate/understand bad-actor behavior and use it to anticipate threats.
How it connects
Connects goals, tactics, procedures, TTPs, bad actors, and the threat landscape.

Also explained in

Compare how 2 books explain technique →

Related concepts

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.