← Tuning & False-Positive Reduction — From Noisy to Trusted

Module Quiz

8 questions · Pass at 75%

Question 1 of 8

A rule fires for Windows Defender accessing LSASS memory. Windows Defender does legitimately access LSASS as part of memory scanning. What is the correct classification of this alert?