Does NetSenX alert from the first day after installation?
Yes, alerts and the device inventory start as soon as traffic flows, but comparisons with each host's normal behaviour get better as NetSenX learns your network. On day one you will see devices appear on the network map and clear patterns such as scanning or regular call-outs raise alerts. What takes longer is the part that depends on history: knowing that the finance server never talks to a certain host, or that a large transfer at 02:00 is unusual for this machine but normal for the backup server. Expect the first weeks to need more of your attention, as you confirm and mark normal activity. There is no ready-made model that knows your network on day zero. The false-positive bound, part of the NetSenX Math Guarantee, is shown only once your own labelled data supports it; until then the dashboard says so instead of showing a number.