Confidence Level indicates if the system is certain in determining if a detected issue or misconfiguration poses a risk.
Anomalies in Saner CSPA are categorized based on a machine learning algorithm threshold or through pre-assigned severity levels. This means that the system is almost certain that these anomalies represent legitimate risks:
— Red: High confidence anomalies. Indicates that most anomalies are significant and require immediate attention.
— Orange: Medium confidence anomalies. Suggests that some anomalies need further validation or investigation.
— Yellow: Low confidence anomalies. Refers to minor anomalies, which may involve less critical issues or potential false positives.
This breakdown helps prioritize actions, ensuring that critical issues are addressed first while allocating appropriate resources to less critical ones.
Look into the Confidence Level to make informed decisions from the:
— Posture Anomaly Details view within the CSPA dashboard
— Posture Anomaly Distribution(High, Medium, and Low) on the CSPA dashboard
See Also
