The TryHackMe Agent Evaluation Room is a subscriber only room that looks at how to improve the security of an AI Security agent. The room is available at: https://tryhackme.com/room/agentevaluation

1.1 How many reviewed cases passed the baseline evaluation?

Answer: 3

1.2 Which search-related measurement failed for the New Device investigation?

Answer: query_target

2.1 Which SIEM field should be used for a platform device identifier?

Answer: device.device_id

2.2 Does one zero-result search prove that related activity is absent? (Yea / Nay)

Answer: Nay

3.1 Which verdict applies when reliable evidence contradicts a condition asserted by the alert?

Answer: FalsePositive

3.2 Did fixing the evidence search automatically fix the verdict? (Yea / Nay)

Answer: Nay

4.1 What type of testing checks whether a change broke behaviour that previously worked?

Answer: Regression

4.2 How many reviewed cases passed the final regression?

Answer: 5

4.3 How many reviewed cases passed the final regression?

Answer: THM{TRACE_TEST_REGRESS}