Detections

Detection = match d'une Rule sur 1+ Events. Score 0-1, statut workflow (open → acknowledged → true_positive/false_positi