2024 State of Threat Detection and Response: The Defenders’ Dilemma

In this independent global research study, we interviewed 2,000 cybersecurity professionals who are involved in security with their organization or influence decisions on security. The purpose of the research is to gain an in-depth understanding about the challenges their organizations face each day when detecting, investigating, and responding to cyber attacks. To do this, the interviews included responses from security engineers, security analysts, security operations center (SOC) leaders, CISOs and other security team members that work in organizations with at least 1,000 employees based in APAC, North America, Europe, or the Middle East.

The data presented provides insight into current threat detection, investigation and response practices. This includes uncovering how effective and efficient technology is working to help SOCs stop attacks, what needs improvement, details about SOC workload, AI adoption and where desired outcomes are or aren’t being met. This report also references additional data that was previously presented in the 2023 State of Threat Detection Report to showcase how the areas covered are improving, staying the same, or compounding further.