Reducing dwell time of threat actors requires a reactive workforce