I think the point at which leverage can be applied most cost-effectively is at the level of state supporters of terrorism. They have the most to lose. If no organized state is supporting them, then their future remains dark. Where were the attackers organized, trained and rehearsed? They cannot achieve much out of truly ungoverned spaces like Somalia. If every organized state is afraid of hosting or training them, they will eventually lose.
That is a big IF.