How to configure real-time ML threat anomaly detection thresholds?

[Mazonia]

What are the recommended parameters for training the RandomForest anomaly classifier?

[Mazonia]

The classifier relies on 32 extracted payload features. Run python train_model.py to calibrate thresholds according to baseline traffic.