Glossary: Security+ Exam Prep 3: Practice Exams

tuning

Also written: alert tuning, false positive, false negative

Narrowing a SIEM rule with an exception for known normal activity, which cuts false positives without the false negatives that disabling the rule would cause.