A repeatable hunting query has demonstrated useful detection coverage. What is required before operationalizing it as an analytics rule?

1. Trigger the maximum severity for every match
2. Copy it without accounting for the rule's time window
3. Validate precision and scheduling, map entities, and test incident behavior
4. Remove all entity fields