Detection Evaluation & Validation¶

We evaluate analytic depth, evasion resistance, and behavioral coverage to ensure detections operate high on the behavioral pyramid. Robust detections withstand variation, obfuscation, and environmental drift.

Detection Evaluation & Validation Key Components

Varifying the analytic fires when expected

ATT&CK Training: Threat Hunting & Detection Engineering

Assessing how high on the behavioral pyramid a detection operates

How to Score Resistance to Adversary Evasion
Combining Observables
Example Mappings

Scoring detections based on behavioral depth and robustness

Summiting Level Definitions
Scored Analytics

Monitoring detection health over time