Skip to content

Glossary: Logs and Data Sources for Investigations

False positive

A reported weakness that isn't really there, or an alert on harmless activity. Tuning the rule reduces them.

Where the book teaches it

Related terms

False negativeAlert