📊 How It Works
Sherlock combines multiple signals, including:
Behavioral patterns
System activity
Session consistency
These are analyzed together to generate a single score.
📈 What the Score Means
Higher score → Behavior aligns with expected session conditions
Lower score → More deviations or flagged activity detected
⚠️ Important Context
The score is not a pass/fail metric
It should always be reviewed alongside:
Flags
Timeline
Session insights
🧠 Best Practice
Use the Integrity Score as:
A starting point, not a final decision
A way to prioritize which sessions to review more closely