An analyst wishes to review an event which has a rules test against both event and flow data. What kind of rule is this?

What is the primary use of viewing the Magnitude metric on the Offenses tab? 

AQRadar analyst can check the rule coverage of MITRE ATT&CK tactics and techniques by using Use Case Manager. In the Use Case Manager app, how can a QRadar analyst check the offenses triggered and mapped to MITRE ATT&CK framework?

When using the Dynamic Search window on the Admin tab, which two (2) data sources are available? 

After conducting a thorough analysis, it was discovered that the traffic generated by an attacker targeting one system through many unique events in different categories is legitimate and should not be classified as an offense. Which tuning methodology guideline can be used to tune out this traffic?