Detection_Engineering / Analyze security telemetry and existing detection coverage to identify detection gaps. Create, test, and tune rules while minimizing false positives. · size 20 · threshold 4 · max attempts 3