Detection Engineering
Detection Requirement Specification: A Theory and Template
A detection requirement is the reasoning that connects a threat concern to a consumer, observable evidence, a testable claim, and an honest boundary of coverage.