Detection & Response
False Positive
Also: false alarm
An alert or block triggered by harmless activity.
In more detail
Too many false positives teach people to ignore alerts or turn controls off. Measure them per rule, and prefer asking over blocking while a new rule is still being tuned.
