The message "update.bad.phishing.sites: Phishing bad sites list updated" generates a false positive. How can I stop it (aside from removing "bad " as BAD_WORDS word?
- [ossec-list] False positive on rule 1002 Dave Rutlidge
- [ossec-list] Re: False positive on rule 1002 Andrew Hay
