Viewing indicators and related detections marked as false positive on the graph


To view on a graph whether an indicator or a related detection is marked or not marked as a false positive:

  1. On the Research graphs page, click the graph on which you want to view indicators. To access this page, you need to switch to the Data management mode.
  2. Right-click the node that you are interested in, and then click Show details.

    A side panel opens on the right, containing detailed information about the node.

  3. Check the Is false positive line.

    An indicator marked as a false positive will have Yes.

    An indicator not marked as a false positive will have No.

    Graph in CyberTrace. Information about a false positive indicator.

    False positives info on a graph

Graphically, false positive indicators and the related false positive detections are different from ordinary indicators and detections, and are displayed as shown in the figure below:

Graph in CyberTrace. False positive indicators in black circles with diagonal stripes.

False positives graphical view on a graph

Page top