Dwell Time

A cybersecurity metric denoting the duration an attacker remains present in a target network between initial compromise and detection and removal. It is used as an indicator of the effectiveness of an organization's security detection and response capabilities.