Hey, I've discovered a false positive in the rule Suspicious JAVA Child Process (which is quite scary at this time of the year...) with the meeting-software Jitsi that should affect some other people. Is there currently a way to report false positives to the detection engineering team, and how woul…

Dealing with False Positives

ferullo (Daniel Ferullo) December 29, 2021, 1:50pm 2

Hi @nemhods . Guidance on how to submit false positive reports is available here

Topic		Replies	Views
False positive report Elastic Security	1	140	April 17, 2025
Submitting False Positives Endpoint Security	0	5316	May 12, 2020
False Positives in the 1000's SIEM	1	543	September 23, 2021
Measuring reaction to detection Elastic Security	4	538	March 29, 2021
MSSP SOC - How to ByPass "Cases" Elastic Security	5	711	December 17, 2020

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Dealing with False Positives

Related topics