Which techniques were detected and how - Which techniques were not detected - Time-to-detect for each detected technique - Quality of blue team response when alerts fired - ATT&CK Navigator visualization of detection coverage