Signals & Detection
Threat Classification
Threat classification is the hybrid AI step that labels incoming events by type and severity, combining fast rule-based tagging with model-based analysis to keep the live feed structured.
Threat classification is the step that turns raw incoming events into a structured, labelled feed. WorldMonitor uses a hybrid approach: fast rule-based tagging handles the common, unambiguous cases, while model-based classification handles nuance and ambiguity.
Consistent type and severity labels are what make downstream correlation possible — convergence detection, focal-point synthesis, and Strategic Risk all depend on events already being classified into comparable categories.