This article is intended as guidance for security operators and security administrators who are using Microsoft Defender for Endpoint. You can get help if you still have issues with false positives/negatives after performing the tasks described in this article. Review and adjust your threat protection settings.Review remediation actions that were taken.If you're seeing false positives/negatives in Microsoft 365 Defender, your security operations can take steps to address them by using the following process: False positives/negatives can occur with any threat protection solution, including Microsoft Defender for Endpoint.įortunately, steps can be taken to address and reduce these kinds of issues. A false negative is an entity that was not detected as a threat, even though it actually is malicious.
In endpoint protection solutions, a false positive is an entity, such as a file or a process, that was detected and identified as malicious, even though the entity isn't actually a threat.
0 kommentar(er)
