Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term Mean Time to Detect

Training Camp • Cybersecurity Glossary

What is Mean Time to Detect?

Mean Time to Detect MTTD measures average time from malicious activity onset to detection, a key indicator of SOC detection maturity.

Glossary > Security Operations > Mean Time to Detect

Understanding Mean Time to Detect

Mean Time to Detect MTTD is a security operations metric measuring the average elapsed time between the onset of malicious activity and the moment defenders identify it. It indicates the effectiveness of monitoring, logging, and detection engineering within a security operations center. A lower MTTD shortens attacker dwell time and is a leading indicator of a mature detection capability.

Learn More About Mean Time to Detect:

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →