An Example:
We have defined two malicious urls in the local_http_intel
This triggers false positives in the Threat Activity of ES on the valid and safe domain of github.com
How can we prevent / fix this?
An Example:
We have defined two malicious urls in the local_http_intel
This triggers false positives in the Threat Activity of ES on the valid and safe domain of github.com
How can we prevent / fix this?