CERNITY / DETECTION QUALITY

Detection quality,
grounded in feedback.

This vendored snapshot joins detection identities to manifest status and ATT&CK mappings. MEASURED rates come from feedback-service dispositions; absent measurements remain insufficient data.

Explore the detection catalog →

experimental means experimental work. shipped does not imply end-to-end verification or measured quality. verified_e2e records manifest-declared verification, not a guarantee for every deployment. Roadmap capabilities are not available yet.

Precision and FP rates describe reviewed disposition records, not recall or a population false-positive rate. FP includes benign and explicit false-positive dispositions. Rates are advisory; ATT&CK mappings do not guarantee detection of every instance of a technique. This snapshot does not declare a measurement window.

5 detections from the generated manifest scoreboard. Measurements apply to the backing detector's reviewed disposition records, not individual detection performance.
Detection	Status	ATT&CK techniques	MEASURED precision
`anomaly-flow-volume`Detector: `anomaly-detector`	`shipped`	None declared	Insufficient datainsufficient dispositions
`behavioral-beacon`Detector: `behavioral-detectors`	`shipped`	`T1071` `T1071.004`	Insufficient datainsufficient dispositions
`dns-tunnel-entropy`Detector: `dns-detector`	`shipped`	`T1071`	Insufficient datainsufficient dispositions
`suricata-sig-et-malware-c2`Detector: `ids-alerts`	`shipped`	`T1021` `T1046` `T1071`	Insufficient datainsufficient dispositions
`ti-policy-blocklist-match`Detector: `threat-intel`	`shipped`	`T1071`	Insufficient datainsufficient dispositions

Detection quality,grounded in feedback.

Detection quality,
grounded in feedback.