# BlackNoise Annual Report 2022 · AI summary

> AI-generated summary of *Attack Detection Performance and Effectiveness: BlackNoise Barometer, year 2022* (Erium). Refer to the full report for figures and charts.

## Scope
- 85 simulations built with a Breach and Attack Simulation solution, 5,270 malicious security events, an average of 62 events per campaign.
- All events linked to the 14 MITRE ATT&CK tactics.

## Key figures
- Simulated events by tactic: Discovery 74%, Lateral Movement 21%, Exfiltration 5%.
- **Average detection rate: 8%**, reaching about 20% for the most mature organizations.
- Detection per stage: Discovery 7%, Lateral Movement 12%, Exfiltration 11%.
- EDR is the primary detection source in 75% of cases.

## Findings
- The overall detection rate remains too low; discovery phases are noisy and poorly monitored.
- EDR is powerful but must be evaluated and tuned to deliver.
- Validating detection on facts, rather than declaratively, is the starting point of a measurable defense.