Behavioral-Detection

Tactics, Techniques, and Procedures (TTPs) describe how threat actors operate across the attack lifecycle. This SECMONS glossary entry explains what TTPs are, how they differ from indicators of compromise, and why behavioral intelligence is critical for long-term defense.

Indicators of Attack (IOA) are behavioral signs that reveal malicious activity occurring within a system or network, allowing security teams to detect attacks based on attacker behavior rather than known malware signatures.