Glossary
False Positive / False Negative
In security detection, a false positive is an alert that incorrectly flags benign activity as malicious, while a false negative is a failure to flag genuinely malicious activity. Tuning detection systems to minimize both, without missing real threats or drowning analysts in noise, is a central challenge of SOC operations.