So just to summarize, because I think my last post was worded poorly. I was able to simulate a frequency shift at roughly a steady voltage and saw no reaction from the ESC. Frequency of the input does play a part, but just how sophisticated the ESC is when it comes to frequency is still a mystery to me, other than what I have posted so far.
So based on what I can tell, the ESC will accumulate an input and develop an average signal input in terms of voltage. This seems to take anywhere from 100 to 200 milliseconds (hard to say exactly). If a sudden increase in the input occurs within a few milliseconds the ESC will signal that as knock. This sudden increase has to occur anywhere from 0 to roughly 20ish milliseconds (I don't really have the equipment to define) and has to exceed the threshold to set off the ESC. Any sudden shift in noise from the baseline average will trigger the ESC if it is large enough. For instance, my guess is one noisy lifter or valve that hammered hard enough would be enough, but if the RPM was high enough the noise would be averaged out and not set off the ESC.
My thought is still that a filter could make the ESC useful for a diagnostic, it could never be made good enough for protection on a high-performance build.
My goal in the long run is to figure out a good filter to not see false knock, but if I do get knock at the very least I want to be able to see it in a log even if I do damage or blow something up.