Hey, I've discovered a false positive in the rule Suspicious JAVA Child Process (which is quite scary at this time of the year...) with the meeting-software Jitsi that should affect some other people. Is there currently a way to report false positives to the detection engineering team, and how woul…

Dealing with False Positives

ferullo (Daniel Ferullo) December 29, 2021, 1:50pm 2

Hi @nemhods . Guidance on how to submit false positive reports is available here

Topic		Replies	Views
False positive report Elastic Security	1	202	April 17, 2025
Submitting False Positives Endpoint Security	0	5533	May 12, 2020
False Positives in the 1000's SIEM	1	551	September 23, 2021
False Positive Elastic Security	7	290	August 24, 2026
Measuring reaction to detection Elastic Security	4	551	March 29, 2021

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Dealing with False Positives

Related topics