Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term Dwell Time

Training Camp • Cybersecurity Glossary

What is Dwell Time?

Dwell time is the period an attacker stays undetected from compromise to discovery, a key measure of breach severity and SOC effectiveness.

Glossary > Security Operations > Dwell Time

Understanding Dwell Time

Dwell time is the total duration an attacker remains undetected within an environment, measured from initial compromise to the moment the intrusion is discovered. It combines mean time to detect with the period before investigation begins, making it a primary indicator of breach severity and overall security program effectiveness. Reducing dwell time limits an adversary's opportunity for lateral movement, data exfiltration, and persistence.

Learn More About Dwell Time:

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →