This TTP Briefing is based on threat intelligence derived directly from LevelBlue incident response engagements worldwide over the past quarter. These engagements are technology – agnostic, providing a clear view into the real-world tactics, techniques, and procedures adversaries are using today.
This edition also incorporates threat intelligence from LevelBlue’s recently integrated teams, including SpiderLabs, which broadens the dataset behind our findings.

