Hey, I've discovered a false positive in the rule Suspicious JAVA Child Process (which is quite scary at this time of the year...) with the meeting-software Jitsi that should affect some other people. Is there currently a way to report false positives to the detection engineering team, and how woul…

Dealing with False Positives

ferullo (Daniel Ferullo) December 29, 2021, 1:50pm 2

Hi @nemhods . Guidance on how to submit false positive reports is available here

Topic		Replies	Views
False positive report Elastic Security	1	123	April 17, 2025
Submitting False Positives Endpoint Security	1	5269	August 17, 2020
False Positives in the 1000's SIEM	2	540	October 21, 2021
Measuring reaction to detection Elastic Security	5	531	April 26, 2021
MSSP SOC - How to ByPass "Cases" Elastic Security	6	709	November 4, 2022

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Dealing with False Positives

Related topics