Detection engineering relies on assumptions made during the creation of detection rules, which are often based on limited data and can lead to false positives. Continuous reassessment of these assumptions is vital, especially as environments and behaviors evolve. The article discusses the challenges of tuning detection rules while balancing the need for accuracy and the limitations of available telemetry.