Depth of coverage matters. Procedures matter.
Technique’s are useful, but recognize they are abstractions and therefore have limitations.
Remember an EDR has to cover one or a few implementations of a technique in order to claim coverage.
Whilst you don't need (nor want) to be covered in all implementations. You might wanna know which are covered and if they matter for your use case.



