Glossary: Security Monitoring and Automation

alert tuning

Also written: tuning, tune

Changing rules so they raise fewer false positives without missing real attacks, by adjusting thresholds and windows, adding narrow exclusions, fixing causes or changing severity. Alex's tuning cut 172 weekly alerts down to the 2 real ones.