Email Makes Up Nearly 1 in 3 MSSP Analyses: How Tier 1 Can Triage Phishing Faster
Disclosure: This article was provided by ANY.RUN. The information and analysis presented are based on their research.
ANY.RUN’s 2026 data shows that email makes up nearly 1 in 3 MSSP analyses. That means phishing takes up a big share of day-to-day work for Tier 1. And the problem is not always finding something suspicious; it is figuring out quickly whether the case is harmless, malicious, or worth sending to Tier 2.
MasterCoding Skills
When that decision takes too long, analysts spend more time switching between tools, checking extra context, and escalating cases just to be safe.
For an MSSP handling large volumes across multiple clients, those delays add up fast. The more Tier 1 can resolve on its own, the more time senior analysts have for the cases that actually need deeper investigation.
Where Tier 1 Loses Time During Phishing Triage
Most delays happen before the analyst can make a...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE
