In cyber security, analytics are platform-specific detection rules, queries, or other logic that turn a high-level detection strategy into something a team can run against its own data. They may target particular log sources, events, or behaviors and generate alerts for investigation.
Analytics matter because a strategy is not automatically deployable: defenders must map it to available telemetry, then tune and test it in their environment. In practice, an analytic might query identity or endpoint logs for suspicious activity. The same logic may need adjustment across platforms, and without operational context it can produce false positives or miss relevant behavior.