We use terraform plan for drift detection. It compares the Terraform state file with the actual infrastructure. If someone has made manual changes outside Terraform, the plan command shows the differences. We also run terraform plan regularly in our CI/CD pipeline to detect drift before applying any changes.