Detection

Three hours from a stolen token to full admin. Weeks to deploy a detection rule.

Attackers now rebuild malware as fast as it is detected. In government a new detection rule still takes weeks to go live.