Skip to main content

Signal Confidence Levels

Confidence level refers to the accuracy of an event, it confirms the event behavior based on detection logic.

  • A signal with a high confidence level means that the detection is specific and severity is also high.

  • A signal with medium confidence may be high severity but detection is not specific.

  • A rule with a low confidence level means that the detection scope is wide and the detection may not be malicious in nature.

The following screen helps you to view the confidence level of a raised signal: