Detection rule
Course: AP® Cybersecurity Shows up in: Unit 1: Introduction to Security
A rule an automated detection system uses to flag likely malicious activity, which AI can suggest and a detection engineer should review.
Appears in the course and exam description (CED): 1.5.A.3
Why it matters in Unit 1
Good rules catch attacks without burying the team in false alarms.
Example
Alert when one account fails to log in 20 times in a minute.
Learn it properly, with a checkpoint 1.5 Leveraging AI in Cyber Defense