Event Based Filtering of Windows correlation rules

Where can I find match filters for different windows correlation rules in elastic search so that I can avoid false positives??

What are windows correlation rules?

I meant for different watches

It's still not clear to me what you are after sorry.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.