Community
Cases and discussion
Incidents people actually worked, detections offered for critique, and questions from practitioners who are stuck. Anyone can read; posting needs an account, and everything is reviewed by a moderator before it appears.
1 result tagged #detection-tuningClear
The alert that turned out to be the software working: what was yours?
The first False-Positive Hall of Fame was written entirely from other people’s rule files. This is the thread for the ones that came out of your estate: the rule that fired, what it actually was, and the discriminator you settled on.
