Signals & Detection
Threat Classification
Threat classification is the hybrid AI step that labels incoming events by type and severity using fast rules plus model-based analysis.
Threat classification is the step that turns raw incoming events into a structured, labelled feed. WorldMonitor uses a hybrid approach: fast rule-based tagging handles the common, unambiguous cases, while model-based classification handles nuance and ambiguity.
Consistent type and severity labels are what make downstream correlation possible — convergence detection, focal-point synthesis, and Strategic Risk all depend on events already being classified into comparable categories.