Threat Actor Behaviour

Modus Operandi (MO) in cybersecurity refers to the characteristic methods, behaviours, and operational patterns adopted by threat actors to plan and execute cyberattacks. It examines how adversaries select targets, gain access, exploit systems, maintain persistence, and achieve their objectives. Understanding these patterns supports threat actor profiling, cyber threat intelligence, threat hunting, security assessment, and incident response.