Hey, I've discovered a false positive in the rule Suspicious JAVA Child Process (which is quite scary at this time of the year...) with the meeting-software Jitsi that should affect some other people. Is there currently a way to report false positives to the detection engineering team, and how woul…

Dealing with False Positives

ferullo (Daniel Ferullo) December 29, 2021, 1:50pm 2

Hi @nemhods . Guidance on how to submit false positive reports is available here

Topic		Replies	Views
False positive report Elastic Security	1	184	April 17, 2025
Submitting False Positives Endpoint Security	0	5480	May 12, 2020
False Positives in the 1000's SIEM	1	548	September 23, 2021
False Positive Elastic Security	7	253	August 24, 2026
Measuring reaction to detection Elastic Security	4	548	March 29, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Dealing with False Positives

Related topics