CrowdStrike defines breakout time as the time an attacker takes after gaining access to a system to break out and move laterally to another system.

“But, um, yeah, I think overall what we've seen is a lot of, uh, we've seen obviously out of China a lot of activity using AI, and we've also seen it in the e-crime world where, um, when someone gets onto a system, we track breakout time.”

“That is if, if, if they got onto your system, how long would it take them to actually break out and pivot and move to a different system? Uh, generally, the system they first land on is not the most interesting.”