Time-Series Detection
Detection rules that reason about behavior over time, using moving averages, seasonality, and deviations, in SIEM query languages to catch threats invisible to single-point thresholds.
Concept Neighborhood
Explore this concept’s connections in the groups below.
Start here
True Positive
A related concept to explore, covered by 8 lessons.
True PositiveStart here
8
lessons
Baseline Analysis
5
lessons
Kusto Query Language
5
lessons
Time-Series Analysis
5
lessons
Statistical Detection
1
lesson
Threat-Informed Coverage
1
lesson
Show 1 more connection
Related Lessons
5 lessons cover this conceptSIEM Data Models and Log Normalization
SOC Analyst
Aggregation and Statistical Analysis for Threat Detection
SOC Analyst
Time-Series Analysis and Multi-Source Correlation
SOC Analyst
Query Tuning, Lookup Tables, and Production Operations
SOC Analyst
Designing a Detection Program with SIEM Queries
SOC Analyst
Sign in to open lesson content directly.