Re: too many false alarms
Stefano Zanero <[email protected]> Fri, 25 Jan 2008 20:35:55 +0100
| Newsgroups | gmane.comp.sysutils.loganalysis |
|---|---|
| Organization | DEI - Politecnico di Milano |
| Message-ID | <[email protected]> |
Marcus J. Ranum wrote: > "False alarm" is when the sensor/IDS/monitor raises an alert that is I would suggest "noncontextual alert", just to get away from the "false" word. > technical staff to go "get another opinion from a REAL IDS expert." Do they know how close to death they were ? :D Stefano