Term Kind Topic What it is
Containment vs Eradication concept Security Incident Response Stopping an attacker's ongoing access versus removing their foothold entirely — sequential phases with different urgency and different risks of doing them wrong.
Dwell Time Mean Time to Detect metric Security Incident Response The period between an attacker gaining access and being detected — the metric that determines how much damage an intrusion can do.