Indicator isn't a Threat (False Positive)
If you suspect that a threat indicator is a false positive, create a support request and explain your reasoning.
The confidence score is a value from 0 to 100 that represents how confident Threat Intelligence is that the indicator might be associated with malicious activity.
Overall confidence refers to the likelihood that indicator might be associated with malicious behavior. The score is an aggregation of weight and risk scores that Oracle assigns to the source of the indicator, the frequency of sightings across sources, the recency of the sightings, and the maliciousness of the observed behavior. This aggregate score does not refer to confidence in any particular threat type or threat actor attribution. Oracle solely assesses and assigns this score, and it does not reflect a score assigned by any of our sources.