> Mandiant, the incident response division of security firm FireEye, said it has tracked the hackers since 2013 and the tactics, techniques and procedures used

> Mandiant, the incident response division of security firm FireEye, said it has tracked the hackers since 2013 and the tactics, techniques and procedures used by the hackers is “consistent” with its findings Can anyone from infosec chime in? I'd love to know how pattern recognition works in figuring out specific actors, since I don't have a good idea what "techniques" here means. Is it the malware used, the attack vectors, or something else?