Signal Confidence Levels

Confidence level refers to the accuracy of an event, it confirms the event behavior based on detection logic.

• A signal with a high confidence level means that the detection is specific and severity is also high.
• A signal with medium confidence may be high severity but detection is not specific.
• A rule with a low confidence level means that the detection scope is wide and the detection may not be malicious in nature.

The following screen helps you to view the confidence level of a raised signal: