Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
True positive: a security alert that correctly detects genuine malicious activity, contrasted with false positives and false negatives in detection tuning.
True Positive Definition: True positive: a security alert that correctly detects genuine malicious activity, contrasted with false positives and false negatives in detection tuning.
A true positive is a security alert that correctly identifies genuine malicious or anomalous activity, representing an accurate detection by a control such as an IDS, SIEM, or EDR platform. It contrasts with a false positive, which flags benign activity as malicious, and a false negative, which fails to detect a real threat. Maximizing true positives while minimizing false positives is a central goal in tuning detection systems and measuring their effectiveness.
Turn knowledge into credentials with our instructor-led cybersecurity boot camps.
View All Courses →