Due to anomalies that may occur we added an advancement to our Alert Rules in GAT Shield.
Now Admins/Auditors can investigate Shield Alerts and where an instance of anomaly occurs they can mark the Shield Alert as a false positive. This will help advance the quality of alerts triggered and help us track and tackle any annomolies that may occur.
To utlilise this feature, Navigate to your Shield Alerts section in GAT Shield.
Shield Alerts #
Navigate to Shield Alerts and inspect an alert by selecting the ‘eye’ icon next to it.
In the inspection window you can submit a false positive alert to our team by selecting the ‘Notify about false positive alert‘ button.
Result #
We will recieve the notification and get back to your promptly.