Threat detection dashboards are masking security coverage gaps

T2Covered by 1 source · first reported by Help Net Security at 25 Sept, 12:04 UTC

A detection rule can show up as deployed on a coverage dashboard and still never fire when an attacker uses the technique it was built to catch. Conifers assessed 14,652 detections in its customer base, including rules written by customers and detections managed by vendors in SIEM, endpoint, cloud…