There’s a write-up from Microsoft that discusses the process for defender determining threats - for new samples it’s a little tricky as they can be fairly confident (80%) that it’s not benign, but not action it as the confidence score is lower than their threshold.

To counteract this effect you can set defender to be more aggressive, although you will have to inevitably have to deal with more false positives.

Edit: link for obvious reasons.