Mandiant M-Trends
Frontline incident-response intelligence on attacker behavior and dwell time.
M-Trends is one of the most respected frontline threat reports, grounded in Mandiant's real-world breach investigations. Its dwell-time and attacker-tradecraft data are widely referenced by SOC teams, threat intel analysts, and security marketers.
FAQs
Mandiant M-Trends: frequently asked questions
What is Mandiant M-Trends?
Mandiant's M-Trends draws on hundreds of thousands of hours of incident-response engagements to report on dwell time, initial infection vectors, and threat-actor tactics. A 17+ year staple for defenders, now published under Google Cloud.
Where is Mandiant M-Trends based?
Mandiant M-Trends is based in Reston, VA, USA.
What is Mandiant M-Trends listed under on Cyber Resources?
Mandiant M-Trends is listed in the Research & Reports category of Cyber Resources, the curated directory of the cybersecurity marketing and growth ecosystem.
More Research & Reports
Verizon Data Breach Investigations Report (DBIR)
New York, USA
The Verizon DBIR analyzes thousands of confirmed breaches and security incidents contributed by law enforcement, forensic firms, and cyber insurers to map how breaches happen and who is behind them. Published annually, it is the most widely cited breach benchmark in the industry.
IBM Cost of a Data Breach Report
Armonk, USA
IBM's Cost of a Data Breach Report surveys hundreds of breached organizations across more than a dozen countries to quantify average breach cost, time to identify and contain, and cost factors such as AI governance and shadow AI. Research is conducted independently by the Ponemon Institute.
CrowdStrike Global Threat Report
Austin, USA
The CrowdStrike Global Threat Report summarizes the Counter Adversary Operations team's analysis of eCrime and nation-state activity, popularizing metrics such as 'breakout time' and named adversary groups. Published annually and widely referenced by SOC and CISO audiences.