This is pretty good on why you should test your detections and options/deliberations to go through when you're considering doing it:
https://medium.com/anton-on-security/testing-in-detection-engineering-part-8-73516197d5b4
This is pretty good on why you should test your detections and options/deliberations to go through when you're considering doing it:
https://medium.com/anton-on-security/testing-in-detection-engineering-part-8-73516197d5b4