Use when assessing whether you collect the telemetry your detections need — mapping what you can and can't see, because you can only detect what you're logging.
