56% of detection engineers update their detection rules and processes daily or weekly. 30% of organisations update rules only when needed, quarterly, or even annually.