In its first half of 2023 analysis, the Sophos X-Ops Incident Response Team found good and bad) news regarding active adversary dwell time. In a nutshell, dwell times — defined as when an attack starts and when it is detected – has declined.

Source: SC Magazine