Skip to content

Glossary: Incident Response and Resilience

dwell time

How long an attacker was inside before being found. For Jo's laptop it was three days, from the first beacon to the hunt.

Where the book teaches it

Related terms

time to detectthreat hunting