---
type: "term"
title: "Medium Velocity Class"
description: "A velocity classification where attack progression occurs within hours."
resource: "tlctc:term:medium-velocity-class"
tags:
  - "glossary"
---
# Medium Velocity Class

A velocity classification where attack progression occurs within hours. Typical threat clusters: #9 (Phishing), #4 (Manual Credential Abuse). Control strategy utilizes SIEM alerting and analyst triage, as human response times are sufficient for detection and initial response. Example: Phishing campaigns followed by manual reconnaissance and lateral movement.