Skip to main content

In the context of Foreign Information Manipulation and Interference (FIMI), TTPs refer to the patterns of behavior used by threat actors to manipulate the information environment in order to deceive. Tactics describe the operational goals that the threat actors are attempting to achieve, techniques are the actions used to accomplish these goals, and procedures describe the specific combination of techniques across multiple tactics (or stages of an attack) that reveal intent and may be unique to different threat actors.