Detection Gap

Definitions

1. A meaningful area of attacker behavior, system activity, or evidence collection that current monitoring cannot observe or alert on. Detection gaps are often found during purple-team exercises, incident reviews, or architecture changes.

   In plain English: An important kind of malicious activity that current security monitoring does not catch.

   Example: "The exercise exposed a detection gap around OAuth token abuse because no one was collecting the right audit events."

Related Terms

• Network Tap
• Alert Fatigue
• Asset Inventory
• Automated Threat Detection
• Continuous Monitoring
• Health Check Security
• Network Probe
• Passive Scanning
• Privileged Session
• Process Monitor
• Real-Time Monitoring
• Remote Monitoring