Hi,
I want to stop the incidents that keep appearing in AA which I already know is a False Positive or rather a legitimate activity.
Does adding those events in the incident as exceptions solve this problem? I don't want to waste my time daily acknowledging the incidents which I already know are legitimate activities.
Please if there is any other way of stopping these alerts from appearing?
Regards
Shrinik
#AttackAnalytics------------------------------
Shrinik Srinivasa
Security Analyst
PageUp
Melbourne, Australia
------------------------------