Noticeable Activity Threshold anomalous sensor alerting model

This threshold is pierced whenever three sensors are in an anomalous state for two hours. It is the minimum threshold for an automated alert from Symantec Deepsight Threat Management System Notifications using the Anomalous sensor alerting model. It may trigger false positive alerts.