detection engineering advanced
The Detection Funnel: How Your 80% ATT&CK Coverage Becomes a 6% Catch Rate
ATT&CK coverage % looks good in board decks. Here's why it compounds into a ~6% actual catch rate, and what Threat Detection Coverage actually means.
· 11 min read
#hot-take
#metrics
#detection-program
#coverage