One Reason Security Is So Hard? Really Bad Reports.

This article describes Jonathan Grier's concept of "security paintings" — designing security reports that distill low-level telemetry into higher-level, user-focused patterns and anomalies so humans can make correct decisions; it critiques common report design flaws (data dumps or oversimplified charts) and recommends combining credible low-level detail with clear high-level summaries to improve detection and response.