Leadership needs to compare response performance over time using consistent definitions. Which approach best fits?

1. Monitor and alert on ingestion health separately from threat detections.
2. Show actionable case status, severity, age, and ownership.
3. Define measurable detection and response metrics with stable start and end events.
4. Monitor the notification and case-delivery path end to end.