Cyberattacks have shifted from the usual smash-and-grab type of heists to stealthier campaigns where hackers silently camp out on networks for long periods. Called attacker dwell time, this is part of an adversarial approach that has become more popular with hackers. 14 percent of firms indicate that the time between compromise and detection is between one to six months. EDR solutions such as advanced endpoint detection and response (EDR) platforms can help identify unknown threats in real-time by using behavioral analysis coupled with user and network fingerprinting.
Source: https://threatpost.com/2021-attacker-dwell-time-trends-and-best-defenses/166116/