運用・SOC
오탐 (False Positive)FP
定義
An alert that incorrectly flags benign activity as a threat. Excessive false positives cause analyst fatigue and alert dismissal.
運用・SOC
An alert that incorrectly flags benign activity as a threat. Excessive false positives cause analyst fatigue and alert dismissal.