Organizations cited an average dwell time of nearly 2 weeks for threat actors prior to a ransomware incident.