4 docs tagged with "AnomalyEvidence"

Properties

Properties

Detection evidence associated with an anomaly. SENTINEL detections populate the agent attribute fields; SIEM detections instead include a baseline with windowed time-series data.

Properties