AWS whitepapers documentation change
Summary
Removed entire section defining attacker dwell time metric and its importance in incident response
Security assessment
Deletion of educational content about security metrics doesn't indicate resolution of a security vulnerability. While the topic is security-related, the removal itself doesn't fix any weakness or address an incident.
Diff
diff --git a/whitepapers/latest/aws-security-incident-response-guide/attacker-dwell-time.md b/whitepapers/latest/aws-security-incident-response-guide/attacker-dwell-time.md index 348f28eb0..8b1378917 100644 --- a//whitepapers/latest/aws-security-incident-response-guide/attacker-dwell-time.md +++ b//whitepapers/latest/aws-security-incident-response-guide/attacker-dwell-time.md @@ -1 +0,0 @@ -[View a markdown version of this page](attacker-dwell-time.md) @@ -3,33 +1,0 @@ -[](/pdfs/security-ir/latest/userguide/sir-ug.pdf#attacker-dwell-time "Open PDF") - -[Documentation](/index.html)[Security Incident Response](/security-ir/index.html)[](what-is.html) - -# Attacker dwell time - -_Attacker dwell time_ is the average time that an unauthorized user has access to a systems or environment. This is similar to mean time to contain, except the time frame begins with the initial time the attacker gained access to the system or environments, which might be earlier than the initial alert or discovery. - -You can use this metric to track how well many of your systems and mechanisms are all working together to reduce the amount of time, access, and opportunity an attacker or threat has to impact your environment. Reducing attacker dwell time should be a top priority for your teams and business. - -The higher the attacker dwell time, the greater the need to identify which parts of the incident response process need improvement to ensure your teams’ abilities to minimize the impact and scope of threats or attacks in your environments. The lower the attacker dwell time, the better your teams are at minimizing the time and opportunity that a threat or attacker has within your environments, ultimately reducing the risk and impact to your operations and business. - - **Javascript is disabled or is unavailable in your browser.** - -To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions. - -[Document Conventions](/general/latest/gr/docconventions.html) - -Mean time to recover - -Metrics summary - -Did this page help you? - Yes - -Thanks for letting us know we're doing a good job! - -If you've got a moment, please tell us what we did right so we can do more of it. - -Did this page help you? - No - -Thanks for letting us know this page needs work. We're sorry we let you down. - -If you've got a moment, please tell us how we can make the documentation better.