TTPs (Tactics, Techniques, and Procedures)

Standardized descriptions of the methods and patterns used by threat actors to plan and execute coordinated activity. Tactics define the strategic objective, techniques describe the approaches used to achieve it, and procedures are the specific actions taken during execution. In digital information environments, TTPs may include coordinated messaging, artificial amplification, impersonation, bot networks, and other repeatable behaviors associated with influence operations. In Cyabra language, emphasis should remain on actors and coordinated behavior, not moral labeling. Cyabra helps identify TTPs and provide narrative intelligence into how digital influence campaigns operate.