Detection

Detection is the settings page where a firm defines what it looks for in trader behavior and when a finding becomes work for someone to review. It answers what the firm detects, classifies, and turns into a Case.

[SCREENSHOT: 14-detection.png: Detectors tab showing the detector list with linked classifications and Case creation status]

How detection is organized

Detection holds three linked record types, and the page is built around a specific order: Patterns → labels → Cases.

• Detectors measure a pattern in trading or login activity, such as copy trading or shared login addresses. A detector reports a signal; it never scores or classifies the trader itself.
• Classifications are the firm's own rules: a label with one or more threshold conditions. A classification applies its label only when its rules hold, and it exists independently of whether it creates a Case.
• Cohorts scope a detector or classification to a defined group of traders. Every firm starts with Firm-wide, which covers every trader and cannot be edited or deleted; custom cohorts narrow that scope by trader attribute, an existing label, or account size.

Case creation is a separate, explicit step from classification. A new classification has no Case subscription until one is configured, and creating a Case never restricts an account or decides a payout on its own: a person reviews the evidence first.

Detectors

Twelve detector types are available, each evaluated over a trader or account:

Login-based detectors read hashed, connection-scoped fingerprints, never raw IP addresses. Each detector can be paused, which stops new runs while keeping its existing evidence and Cases available.

Classifications and Cases

A classification combines one or more rules (a measurement, an above/below comparison, and a threshold) with a match mode: Every rule must hold or Any rule may hold. Detector-based rules can also require a minimum share of the trader's activity, so a single coordinated trade does not trigger a label on its own.

Case creation is configured per classification, separately from the rule itself:

• Create Cases on entry turns a matching trader into a Case the moment they enter the classification. Existing Cases stay available even if this is switched off afterward.
• An optional minimum detector confidence filters out low-confidence evidence before it can create a Case.

Each classification shows its current Case state: On entry (ready), Off (no active subscription), Check paused detector (a detector it depends on is paused), or Label disabled.

How it connects

Detection feeds Cases: a Case subscription is what turns a classification match into work someone investigates. Relationship evidence surfaced here (mirrored trades, hedged positions, shared fingerprints) shows up on QuantSentry Network. Detector and classification measurements can also draw on Metrics, since any trader-eligible business metric is available as a classification rule or through the Catalog metric detector, and both pages share the same catalog. Connections supplies the trades, logins, and news events that detectors read.