Alerting

MP3 file tagged as Ransomeware

thedeviator
New Member

I recently setup Security Essentials for reporting on common ransomeware extensions. I received my first alert but it tagged a bunch of MP3s as TeslaCrypt3.0+ 

I have confirmed the files are not ransomeware. Is there a reason for this? how can I limit the amount of false positives? 

Labels (1)
0 Karma
Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...

From GPU to Application: Monitoring Cisco AI Infrastructure with Splunk Observability ...

AI workloads are different. They demand specialized infrastructure—powerful GPUs, enterprise-grade networking, ...

Application management with Targeted Application Install for Victoria Experience

  Experience a new era of flexibility in managing your Splunk Cloud Platform apps! With Targeted Application ...