Which feature of Cisco Cyber Threat Defense uses more than 40 detectors to process every HTTP or HTTPS request the network?

Event classification correlates and categorizes security events after they are detected, rather than performing per-request analysis using multiple detectors.

Relationship modeling maps associations between entities such as users, hosts, and applications, but is not the component that processes every web request with 40-plus detectors.

Trust modeling assigns confidence scores to network entities based on observed behavior, but does not directly process each HTTP/HTTPS request with a detector array.

Anomaly detection in Cisco Cyber Threat Defense leverages over 40 detectors that examine behavioral patterns in HTTP and HTTPS traffic to identify deviations from established baselines, flagging threats such as command-and-control communication or data exfiltration that signature-based tools would miss.