Hmm... If attackers compress exploit development from weeks to hours, does “time to inventory” become a more important security metric than “time to patch”? Anyone working with threat hunting or vulnerability management with some insight into this?