• Support
  • Forums
  • Blogs

False positive tag and correlation

OTXFEEDTMSOTXFEEDTMS

New Life Form
+2
When I found a false positive alarm and I apply a label , there is a mean to apply this label to others same alarms or to new alarms?

Share post:

Answers

  • OTXFEEDTMS,

    You can mark an individual result as a false positive. This will not apply to similar results on other asset, nor to future scan results, as a false positive may be a conditional false positive (false on one machine, or at one time, but subject to change due to conditions).

    There is an idea forwarded for adding a trigger for "acceptable risk" which would persist, but this has not been added to the product as of this date.

    You may consider disabling specific scans if you do not want to have those results:

Sign In or Register to comment.