Are there false positives?

Yes, as with any anomaly detection system.

It is important to understand that:

• AI detects deviations, not “attacks”;
• an anomaly ≠ an incident;
• some detections require interpretation by an analyst.

The project’s approach is to:

• show the reason and context of an anomaly;
• allow comparison between time periods;
• avoid making automatic decisions on behalf of the user.