Tag: False positive

Rule Customization On The Fly
Rule Customization On The Fly

How It Works Uncoder AI’s on-the-fly customization capability enables security teams to instantly adapt rules and queries to their specific environment using Customization Profiles. The screenshot showcases how analysts can: Choose Custom Field Mappings to tailor table names, index structures, and field naming conventions, ensuring compatibility with internal data schemas. Apply presetsto instantly change parameters […]

Read More
Deliver TI feeds into ArcSight without false positive triggers
Deliver TI feeds into ArcSight without false positive triggers

Every ArcSight user or administrator is faced with false positive rule triggers while delivering threat intelligence feed into ArcSight. This mostly happens when threat intel source events are not excluded from rule condition or connector tries to resolve all IP addresses and host names that are processed.

Read More