Research on 14,652 threat detections found 47% need fixing, with coverage gaps in one in three relevant MITRE ATT&CK techniques.