Understand Velora Federated Patterns

Velora Federated Patterns is an emerging Nova capability in controlled preview. It identifies similar patterns in observed activity, checks the evidence for recurrence and suggests which patterns deserve further investigation.

VFP helps a team decide what may deserve a closer look. It does not make the decision, prove malicious intent, alter a live score, activate a hunt, publish a detection, or execute response.

Where VFP is available in controlled preview, the Federated Intelligence page shows learning progress, relevant recurring patterns, coverage and the limits of each comparison for the selected customer environment.

Shared patterns use privacy-protected summaries. They do not reveal other customers' identities, organizations, original events, alerts or participation in a comparison.

Evidence links open records from the selected customer's environment. A missing record cannot be replaced with information from another customer.

• A privacy threshold must be satisfied before collective support is published.
• Partial, failed, or unassessed learning remains visibly incomplete and never becomes a low-risk conclusion.
• The comparison method is shown with its confidence level and limitations.

Recurring-pattern observation

Identifies when supported platform-observed situations recur often enough to justify review.

Significance ranking

Orders candidate patterns by recurrence, evidence quality, and potential operational relevance.

Hunt proposal

Turns a recurring pattern into a specific threat hypothesis for an analyst to test.

Priority proposal

Suggests that a recurring signal may deserve additional prioritization review without changing a live score.

Coverage proposal

Surfaces a repeated evidence shape that may indicate a coverage question worth assessing.

Analyst review

Keeps recurrence, quality state, supporting evidence, and intended consumer attached to the proposal.

1. 01
   Observe

   Find structurally similar situations within the supported platform evidence.

2. 02
   Compare

   Check recurrence, supporting evidence, quality state, and missing coverage.

3. 03
   Rank

   Order candidate patterns by supported significance and intended operational value.

4. 04
   Propose

   Create a hunt, priority, or coverage question with its evidence and limits attached.

5. 05
   Review

   The receiving team applies its own validation and approval requirements.

Question to investigate

A specific threat hypothesis that helps analysts choose what to investigate next.

Signal to reassess

A proposal to review prioritization context without directly changing a NovaSignal score.

Gap to examine

A proposal to assess whether current detection or evidence coverage is sufficient.

Authorized reviewers can acknowledge, accept, dismiss, or complete a proposal with a clear reason. This records the team's decision without changing the original VFP assessment or performing an action.

Retained history keeps each assessment tied to its original patterns and local context. A link from Velora Autonomous Intelligence opens the exact retained assessment rather than replacing it with the latest result.

• Review status is visible only within the selected customer and organization.
• New or growing patterns appear in Nova activity after the assessment for that customer's environment has been published.
• If an older assessment is no longer retained, Nova says so and does not substitute another result.

• A recurring pattern is not a detection, finding, or malicious-intent verdict.
• Incomplete observation remains incomplete and does not become a low-risk conclusion.
• VFP ranks proposals. It does not activate hunts, change scores, deploy rules, or execute response.
• Each capability using a proposal still applies its own checks, reviews and approval requirements.
• Controlled preview does not imply general availability, release commitment, or inclusion in a customer environment.