Q1 2022 Incident Response Insights from Tetra Defense

**Q1 2022 Incident Response Insights:** Tetra Defense found that 82% of incidents stemmed from external exposures — primarily exploited external vulnerabilities (57%) and risky external exposures like exposed RDP (25%) — with Microsoft Exchange ProxyShell driving the largest share (33%) and Log4Shell accounting for 22%; the report stresses higher remediation costs for vulnerability-driven incidents, the continued role of compromised credentials, and the importance of patch prioritization and MFA.