Which of the following best describes "procedures" according to the MITRE ATT&CK Framework?

$1.$

Procedures describe the way a threat actor operates during different steps of it's operation $/$ campaign.

$2.$

Procedures clearly define the goals of the attacker.

$3.$

Procedures are particular instances of how a technique or sub$-$technique has been used.

$4.$

Procedures provide a description of the different ways that a cyber attacker can achieve the goals of the tactic.