Tactics, techniques, and procedures describe the behavioral patterns, methods, and operational approaches used by threat actors during attacks. These patterns are often consistent across campaigns and are widely used in threat intelligence to associate activity with specific threat groups, making them highly effective for attribution and identifying which actors are targeting a particular industry.