You are preparing a quarterly executive report on the effectiveness of your security operations program. Leadership wants a single headline metric that best communicates whether the SOC's detection engineering effort is actually improving the organization's ability to catch adversary behavior across the attack lifecycle — not just how busy the team is. Which metric should you feature as the primary indicator?