How do you validate detection effectiveness?

We execute real attack techniques in controlled environments and verify that detection rules fire correctly. We test for both true positives and false positive scenarios.