In TTPs, what does the term 'tactic' refer to?

The term 'tactic' in the context of tactics, techniques, and procedures (TTPs) refers to a high-level description of actor behavior. Tactics provide insights into the methods used by adversaries, showcasing their intent and the overarching strategies they employ to achieve their objectives.

In operational terms, tactics outline what an adversary does — for example, how they might gain access to a target system or exfiltrate data. By understanding these high-level behaviors, counter-insider threat professionals can tailor their defenses to identify and mitigate specific threats associated with those behaviors effectively.

The other choices, while related to different aspects of TTPs, do not accurately define 'tactic.' A specific technique pertains to a finer-grained method of execution rather than the overarching behaviors covered by tactics. Detailed procedures for executing a technique are more aligned with the procedural aspect of TTPs, emphasizing exact steps rather than strategic intent. The overall strategy employed by adversaries is broader and encompasses more than just the specific actions taken at a tactical level. Thus, the choice regarding a high-level description of actor behavior captures the essence of 'tactic' accurately within the framework of TTPs.