# Mandiant M-Trends

> Frontline incident-response intelligence on attacker behavior and dwell time.

M-Trends is one of the most respected frontline threat reports, grounded in Mandiant's real-world breach investigations. Its dwell-time and attacker-tradecraft data are widely referenced by SOC teams, threat intel analysts, and security marketers.

- **Category:** [Research & Reports](https://gracker.ai/cyber-resources/research)
- **Website:** https://cloud.google.com/security/resources/m-trends
- **Location:** Reston, VA, USA
- **Verified:** Yes
- **Last updated:** June 9, 2026

## Frequently asked questions

### What is Mandiant M-Trends?

Mandiant's M-Trends draws on hundreds of thousands of hours of incident-response engagements to report on dwell time, initial infection vectors, and threat-actor tactics. A 17+ year staple for defenders, now published under Google Cloud.

### Where is Mandiant M-Trends based?

Mandiant M-Trends is based in Reston, VA, USA.

### What is Mandiant M-Trends listed under on Cyber Resources?

Mandiant M-Trends is listed in the Research & Reports category of Cyber Resources, the curated directory of the cybersecurity marketing and growth ecosystem.