False positives

Alerts generated for activity that appears suspicious under a rule but is ultimately legitimate.

9 September 2026