Hey, I've discovered a false positive in the rule Suspicious JAVA Child Process (which is quite scary at this time of the year...) with the meeting-software Jitsi that should affect some other people. Is there currently a way to report false positives to the detection engineering team, and how woul…

Dealing with False Positives

ferullo (Daniel Ferullo) December 29, 2021, 1:50pm 2

Hi @nemhods . Guidance on how to submit false positive reports is available here

Topic		Replies	Views
False positive report Elastic Security	1	216	April 17, 2025
False Positive Endpoint Security	0	76	October 5, 2026
Submitting False Positives Endpoint Security	0	5588	May 12, 2020
False Positives in the 1000's SIEM	1	554	September 23, 2021
False Positive Elastic Security	7	319	August 24, 2026

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Dealing with False Positives

Related topics