What is "TTP hunting" in terms of network security research?

I came across this term, but do not know what this is . Tried to google it, but TTP seem to stand for many different things, but none of them seemed related to network security or malwares.


According to this TTP refers to the Tactics, Techniques and Procedures of cyber threats.


Traditional security measures like firewalls, IDS, endpoint protection, and SIEMs are only part of the network security puzzle. Cyber Threat Hunting refers to proactively and iteratively searching through networks or datasets to detect and respond to threats that evade traditional rule- or signature-based security solutions. It includes using both manual and machine-assisted techniques, and aims to find the Tactics, Techniques and Procedures (TTPs) of advanced adversaries.

| improve this answer | |
  • 1
    Many thanks - that's ideal. It just protects the answer from link-rot. Have an upvote from me – Rory Alsop Sep 27 '16 at 7:02

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.