I need a solution
The current thresholds for Cylence are 4 and 7. With 7 and above is the threshold for a block and 4 and below is the threshold for a good benign file. My understanding is that anything in between 4 and 7 will be sent to the AV engine to be scanned. Would it make more sense to avoid any false positives and negatives to change these limits to 3 and 8. Are the default limits the recommended ones and if so, is there a reference I can use for that.