This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
Register Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Discussions

What's the proper procedure of filtering false positives from ioc, boc, eoc

JeremyKerwin
Valued Contributor
Valued Contributor

2 weeks ago

Going through the behaviour, indicator and enabler of compromises I have a lot of false positives.

What's the correct procedure for filtering those false positives so I'm not jumping at shadows every day?

Labels:
0 Likes
0 REPLIES 0
© 2022 RSA Security LLC or its affiliates. All rights reserved.