Detection Visibility Metrics

This document is a template that outlines key metrics to track for an enterprise detection program—users, technology assets, identity accounts and groups, logging/data ingestion and retention, common log sources, email throughput, network throughput, and storage—intended as operational guidance rather than a report of any security incident or threat.