Back to Floor
Investigation & ES • Room 2
Dwell Time & MTTR
Security Operations is measured by key performance metrics. These tell leadership how effective the SOC is.
Dwell Time: How long an attacker is present in the network before detection. Industry average can be over 200 days. MTTR (Mean Time To Respond): How quickly the SOC triages, investigates, and remediates once an alert fires.
Knowledge Check
Prove your understanding to clear the room (Rewards XP)
Question 1 of 1
Your SOC discovers that an attacker has been present in the network for 45 days before an alert fired. Which metric does this represent?