The window for intrusion detection keeps getting shorter as ransomware group’s time-to-ransom (TTR) accelerates.