Avanan engine detections are generated with confidence level, indicating how sure the engine is of each detection. For Phishing detections Avanan already generates 2 event types: Phishing, for high confidence detections; and Suspected Phishing, for lower confidence detections.
The same concept is now being applied to Malware detections: lower confidence detections would generate a "Suspected Malware" events, in addition to "Malware" events for high confidence detections.
The new event type is also reflected in the Malware infobox on the main dashboard, as well as in the weekly reports.