TTP Level Sorter

About this interactive

What you'll learn

• Classify a description of attacker activity as a tactic (the goal of a step), a technique (a method for reaching it) or a procedure (the exact steps one attacker took)
• Trace how one tactic is reached through techniques and how each technique is carried out through procedures

Aligned to

Key terms

Tactics, Techniques, and Procedures

TTP

Tactics, Techniques, and Procedures describe the behavior and methods used by threat actors during cyberattacks, with TTPs forming the basis for frameworks such as MITRE ATT&CK and enabling defenders to develop detection and response strategies.

Tactic

In the MITRE ATT&CK framework, a high-level objective or goal an adversary seeks to achieve during an attack, such as reconnaissance or privilege escalation.

Technique

In the MITRE ATT&CK framework, a specific method an adversary uses to accomplish a tactic.

Spear Phishing

A targeted phishing attack directed at a specific individual or organization using personalized information.

Lateral Movement

A MITRE ATT&CK tactic in which an adversary pivots from one compromised system to other systems within the same network environment.

Threat Actor

An individual or group responsible for a security incident or attack.

Topics

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.