Threat actor tactic

As explained in Azure Security

A high-level behavior or approach a bad actor uses to achieve a goal.

How Azure Security covers it

How deep it goes

Defines tactics within the tactics-techniques-procedures hierarchy and illustrates the levels, without detailing specific cyber procedures.

Examples

Uses a weight-loss goal, healthier lifestyle, exercise and eating techniques, progress tracking, and exercise-machine procedures as an analogy.

What it assumes

Introduces goals, tactics, techniques, and procedures without requiring prior knowledge of the hierarchy.

What you can do after

Evaluate bad-actor behavior to recognize threat complexity and anticipate likely compromise approaches.

How it connects

Connects goals with techniques, procedures, TTPs, cyber threats, and the threat landscape.

liveBookmanning.com

Read Azure Security on liveBook Get the book at manning.com

Also explained in

• 

  liveBookmanning.com
  Cyber Threat HuntingA tactic in the ATT&CK framework is an adversary's tactical goal or reason for performing an action.

Compare how 2 books explain threat actor tactic →

Related concepts

• MITRE ATT&CKpart of · MITRE ATT&CK is a publicly maintained knowledge base and framework cataloging adversary tactics, techniques, and procedures based on observed cyberattacks.
• threat actorused by · A threat actor is a person, group, process, or other entity that intentionally attempts to compromise, misuse, disrupt, or defeat the security of a system or information.
• techniquecontrasts with · A technique is a deliberate, systematic, and repeatable method for performing a task, solving a problem, or achieving a desired result.

This explainer was generated by Manning's knowledge graph from the text of Azure Security. The section links point to the parts of the book it draws on.