Filtering false positive indicators and detections

When viewing indicators or detections, you can filter the records that are marked or not marked as false positives.

To filter false positives to be displayed on the Indicators page:

1. Click the (funnel) icon in the FP column of the table.
2. In the dialog box that appears, select the option that you need:
   • False positives
   • Not false positives

The table shows the records that you have selected.

To filter false positives to be displayed on the Detections page:

1. Click the (funnel) icon in the Additional info column of the table.
2. In the dialog box that appears, select either All, False positives, or Not false positives.

The table shows the records that you have selected.

Page top