How to Know if Your Cybersecurity Tools Are Actually Working