What happens when you select "False Positive" from the right-click menu in the Log Activity tab?

What happens when you select "False Positive" from the right-click menu in the Log Activity tab?
A . You can tune out events that are known to be false positives.
B . You can investigate an IP address or a user name.
C . Items are filtered that match or do not match the selection.
D . The selected event is filtered based on the selected parameter in the event.

Answer: A

Explanation:

Selecting "False Positive" from the right-click menu in the Log Activity tab opens a window that enables users to tune out events that are known to be false positives, preventing them from generating offenses. This feature is crucial for minimizing noise and focusing on genuine threats, thereby enhancing the efficiency of threat detection and response processes within QRadar.

Subscribe
Notify of
guest
0 Comments
Inline Feedbacks
View all comments