| ▲ | elevation 9 hours ago | |
> But it's not a component of my security You may not see it as “security“, but any entity that is actively monitoring their logs benefits when the false positives decrease. If I am dealing with 800 failed login attempts per minute I cannot possibly investigate all of them. But if failed logins are rare in my environment, I may be able to investigate each one. Obscurity that increases the signal to noise ratio is a force multiplier for active defense. | ||