Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Tactics, techniques, and procedures. The way a particular attacker works: what they go after, the methods they use, and their habits right down to file names and timing. TTPs are far harder to change than an IP address or a file hash, which makes them the more durable thing to detect on.