Attacks carried out with stolen enterprise IDs or other credentials last an average of ten months before they are detected, ...