Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
A false negative is when a security control fails to detect real malicious activity, letting a genuine threat pass undetected in a SOC.
False Negative Definition: A false negative is when a security control fails to detect real malicious activity, letting a genuine threat pass undetected in a SOC.
A false negative occurs when a security control fails to flag activity that is in fact malicious, allowing a genuine threat to slip past detection unalerted. In a SOC it is widely considered the most dangerous detection error because the missed event produces no signal for analysts to investigate, unlike a false positive that at least surfaces for review.
Turn knowledge into credentials with our instructor-led cybersecurity boot camps.
View All Courses →