Discussion Topics
Explore the TTP Briefing Q1 2026 for the latest trends, techniques, and procedures (TTPs) LevelBlue incident response (IR) experts are actively facing. The report is built on data from global incident response investigations across LevelBlue and frontline threat intelligence from LevelBlue SpiderLabs and trillions of security events.The TTP Briefing covers how threat actors gain access, move through networks, and monetize attacks. A few notable trends to highlight:
- New social engineering tactics that are growing in sophistication
- Business email compromise incidents are resulting in data exfiltration
- Threat actors are abusing AI tools to move laterally in a network
