Operations & SOC
오탐 (False Positive)FP
Definition
An alert that incorrectly flags benign activity as a threat. Excessive false positives cause analyst fatigue and alert dismissal.
Operations & SOC
An alert that incorrectly flags benign activity as a threat. Excessive false positives cause analyst fatigue and alert dismissal.