<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>Threat-Intelligence on Framework Made Simple</title><link>https://framework.metacog.co.kr/tags/threat-intelligence/</link><description>Recent content in Threat-Intelligence on Framework Made Simple</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Wed, 05 Aug 2026 05:07:59 +0900</lastBuildDate><atom:link href="https://framework.metacog.co.kr/tags/threat-intelligence/index.xml" rel="self" type="application/rss+xml"/><item><title>TTPs: Reading the Enemy's Three-Layer Playbook</title><link>https://framework.metacog.co.kr/posts/2026-08-05-ttp-tactics-techniques-and-procedures/</link><pubDate>Wed, 05 Aug 2026 05:07:59 +0900</pubDate><guid>https://framework.metacog.co.kr/posts/2026-08-05-ttp-tactics-techniques-and-procedures/</guid><description>&lt;h2 id="-what-is-it"&gt;🔍 What Is It?&lt;/h2&gt;
&lt;p&gt;&lt;strong&gt;TTPs breaks down how anyone carries out a plan into three layers — the big goal, the method they pick, and the exact steps they follow.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;TTP stands for Tactics, Techniques, and Procedures. It is a way of describing exactly how someone — usually a hacker, but also a soldier or a criminal — carries out an attack. Instead of just saying a hacker broke in, TTPs let experts write down every layer of the plan: what the attacker was ultimately trying to achieve, which method they chose to get there, and the precise step-by-step moves they made.&lt;/p&gt;</description></item></channel></rss>