welcome to model one less than three
In this lesson, we will define and explore what an attack tactic is
as well as start to build an appreciation for how these tactics fit into the overall attack. TTP model
tactics can be defined as the goals and adversary has during an attack.
We can think of this as why they perform each action or behavior during a campaign.
And while the list of tactics may differ across technology domains or matrices,
there's plenty of overlap.
And this list of tactics is relatively static over time.
The attack model treats tactics as objects, each of which is assigned a unique ID.
Tactics also have short and long descriptions, as you can see from example below. With the persistent tactic
going back to our Matrix view, you can see that tactics are represented as column headers
zooming in on an individual tactic. In this case, the labor movement.
You can see that there are various techniques and some techniques associated with performing
behaviors that achieve the goal of the overall tactic of lateral movement.
We'll dive into technique and some techniques later,
and with that, we reach our less than three knowledge check
and attack tactic is,
please take a moment and positive video and select the correct answer before proceeding.
In this case, the correct answer was B and attack tactic is an intermediate objective of the adversary.
And with that, we've reached the conclusion of less than three
in summary attack tactics represent adversary goals or why they perform actions
tactics are assigned unique IEDs and lead us into more specifics regarding adversary behaviors such as techniques and some techniques.