Ravi Sir's Cyber Security Cards › Comparison Cards
True Positive vs False Positive
Comparison card: True Positive vs False Positive. Easy English, with a real example. Scan the QR for the full lesson.
Read card text
What this card says
What each one is
True positive: a real attack the alert correctly caught.
False positive: a normal event the alert wrongly flagged.
Why it matters
Too many false positives cause alert fatigue, so analysts miss real ones.
Example
A login from a new office IP flagged as an attack is a false positive.
What to do
Tune rules to cut false positives, and keep a clear way to confirm true ones.
Learn more in the lesson: 31.5 Alert Triage