MTTR

Mean time to respond. How long from detection to containment. Where MTTI measures the time to reach a verdict, MTTR measures the time to act on it. Forcepoint holds 14 minutes on P0 incidents. Forcepoint case study

Defined in the AI SOC glossary.

Other terms

Agentic SOC — AI agents carry work to completion; analysts supervise.
AI SOC — The broad term, covering assistant through to full agent.
Alert triage — Deciding whether an alert is real. Where analyst hours go.
Exabots — Exaforce's five task-specific AI agents.
MDR — Managed detection and response, run by an external team.
MTTI — Mean time to investigate: how long to reach a verdict.
Multi-Model AI — Exaforce's three-model reasoning engine.
Semantic context — Structured meaning attached to events at ingest.
SIEM — The traditional log aggregation layer. Exaforce is not one.
SOAR playbooks — Deterministic automation scripts, and why they break.
Threat hunting — Searching for adversary activity that no alert fired on.
UEBA — Baselining normal behavior to spot deviation from it.

All terms