Generally speaking, cyber security’s focus has been on detect-and-respond approaches. In the 2016 DBIR published by Verizon, the reported time for adversaries to get in and out of your network is measured in minutes (or seconds), whereas the time to even identify that you’ve been compromised is measured in days.
Original author: Adam Meyer