Juniper SECURITY THREAT RESPONSE MANAGER 2008.2 - CATEGORY OFFENSE INVESTIGATION GUIDE REV 1 Manual page 66

60 P E
OTENTIAL XPLOIT
Step 2
Step 3
Step 4
Step 5
O
FFENSES
Select the event with the source IP address known to be producing this activity.
Click False Positive.
The False Positive window appears with information derived from the selected
event.
Select the necessary event properties to tune as a false positive.
For additional information on using the False Positive tuning function, see the
STRM Users Guide.
Click Tune.
STRM will no longer create additional offenses for this source IP address when
performing normal VA or network management tasks.
Category Offense Investigation Guide