...

Currently, the false positive rate is approximately 1 response per weekmonth, per 1000 1800 deployments/agents.

Corrupted Program Doing Rapid File Operations

...

Administrative or Backup Tools

In some circumstances, a tailored behavior must be created for an administrative or backup tool must be whitelisted, while the Cyber Crucible team develops an improved behavioral model. In this case, the Cyber Crucible team will assist in the creation of an exception in the behavioral model, which will single out the program plus arguments for an extrememly extremely small window of opportunity for a possible attack.

...