Tactics, Techniques, and Procedures (TTP):

Describes the behavior of cyber attackers, including the methods they use to gain access, escalate privileges, move laterally within networks, and execute their attacks.

Tactics are the high-level goals or objectives that an attacker wants to achieve. 

Techniques are the methods or tools attackers use to accomplish their goals.

Procedures are the step-by-step actions taken to implement a technique. 

Related term: Security Awareness Training