In reply to forugh fallahi.

Hello Forugh,
Thank you for your comment. If you would like to understand more background about the Cognitive technology, I would encourage you to have a look at the following blogs:
https://blogs.cisco.com/security/piecing-together-malicious-behavior-in-encrypted-traffic
https://blogs.cisco.com/security/closing-one-learning-loop-using-decision-forests-to-detect-advanced-threats
https://blogs.cisco.com/security/cognitive-threat-analytics-transparency-in-advanced-threat-research
https://blogs.cisco.com/security/talos/machine-learning-detectors

I hope that helps answer your question and provide the details you're looking for.

With Kind Regards,
Evgeny