This is SANS’s inaugural year conducting our Detection and Response Survey, which aimed to gather insights on how organizations around the globe manage cybersecurity threats. Our goal was to interpret the raw data from respondents and offer insights and guidance to help other professionals in the field enhance their detection and response strategies. One main objective was to explore how organizations detect and respond to cyber threats. As we analyzed the state of detection and response in 2024, it became evident that these capabilities are central to an organization’s cybersecurity strategy, but may be left behind when it comes time to build cybersecurity budgets.