A Correlation Search is a scheduled search designed to detect a specific threat pattern (TTP) and generate an Alert or Notable Event.
Effective correlation requires balancing fidelity (accuracy) with recall (catching everything). Tuning out false positives requires intimate knowledge of the environment.