← Security+ glossary

Alert tuning

The process of adjusting rules and thresholds for alerts in order to reduce the number of false positives and unimportant alarms while keeping the truly important ones. The goal is for analysts to see fewer but higher-quality and more relevant alerts, which prevents alert fatigue.

All Security+ guides →