Glossary

Detection Coverage

How much of the relevant threat behavior an organization can actually detect, measured by which attacker techniques, log sources, and assets are covered by working detections. Gaps in coverage are blind spots attackers can exploit.