运维与 SOC
오탐 (False Positive)FP
定义
An alert that incorrectly flags benign activity as a threat. Excessive false positives cause analyst fatigue and alert dismissal.
运维与 SOC
An alert that incorrectly flags benign activity as a threat. Excessive false positives cause analyst fatigue and alert dismissal.