Hi;
When we start using CloudSoc with behaviour based detectors, as the system establishes a baseline behaviour for a certain user, when does the system reach a point when it has learnt enough. I guess I am asking this question as that I know that without a baseline, the default baseline is used "from all other CloudSoc tenants", but when is the point of time when we switch from the default baseline to the baseline that has been learnt for this user.
Kindly
Wasfi